Mcollective, puppet, puppet enterprise

This hub aggregates every CVE we track for Mcollective, puppet, puppet enterprise, a product in the enterprise software space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 1 most recently published vulnerabilities affecting Mcollective, puppet, puppet enterprise.

• CVE-2017-2292Versions of MCollective prior to 2.10.4 deserialized YAML from agents without calling safe_load, allowing the potential for arbitrary code execution on the server. The fix for this is to call YAML....9.0Jun 30, 2017