Mcollective
Puppet · 2 CVEs
CVE-2017-2298
MEDIUM
The mcollective-sshkey-security plugin before 0.5.1 for Puppet uses a server-specified identifier as part of a path whe…
Jun 30, 2017
CVE-2017-2292
CRITICAL
mcollective: RCE via YAML deserialization
Jun 30, 2017
| CVE ID | Description | Severity | EPSS | Published |
|---|---|---|---|---|
| CVE-2017-2298 | The mcollective-sshkey-security plugin before 0.5.1 for Puppet uses a server-specified identifier as part of a path where a file is written. A compromised serv… | MEDIUM | 1.49% | Jun 30, 2017 |
| CVE-2017-2292 | mcollective: RCE via YAML deserialization | CRITICAL | 2.18% | Jun 30, 2017 |
Showing 1 to 2 of 2 CVEs