Packages / Debian 12 (Bookworm) / Source / admin / puppetserver
configuration management system, transitional package
configuration management system, transitional package
Matching against OpenFactory catalog package versions is in progress.
| CVE | Severity | Version impact |
|---|---|---|
| [CVE-2026-85979] Published: Affected versions of Puppet Enterprise contain a command injection vulnerability. An authenticated user with Puppet administrative privileges can inject arbitrary shell commands by providing a special | High(8.6) | Not affectedDetails (4)
|
| [CVE-2025-10360] Published: In Puppet Enterprise versions 2025.4.0 and 2025.5, the encryption key used for encrypting content in the Infra Assistant database was not excluded from the files gathered by Puppet backup. The key is | Medium(6.9) | Not affectedDetails (4)
|
| [CVE-2025-5459] Published: A user with specific node group editing permissions and a specially crafted class parameter could be used to execute commands as root on the primary host. It affects Puppet Enterprise versions 2018.1. | High(8.6) | Not affectedDetails (4)
|
| [CVE-2021-27023] Published: puppet-agent: CVE-2021-27023 | Critical(9.8) | Not affectedDetails (4)
|
| [CVE-2020-7943] Published: puppetdb: CVE-2020-7943 | High(7.5) | Not affectedDetails (4)
|
| [CVE-2014-7170] Published: Not reported puppetserver: CVE-2014-7170 | Low | Not affectedDetails (4)
|
| [CVE-2016-2785] Published: Not reported puppetserver: CVE-2016-2785 | Low | Not affectedDetails (4)
|
Last synced:
Authoritative source; repository metadata signature verified
bookworm-main-amd64:9e0b5aabb2465b3d2e7a7fe27f9913846277833f7a2826e7767acccff5b588c5
Authoritative source; repository metadata signature verified
bookworm-main-arm64:2ddb1737692e8c45c53e8d57c0ce4cd21c78c5703b830c3226b1423566a06c00