Описание
Puppet Labs Facter 1.6.0 through 2.4.0 allows local users to obtains sensitive Amazon EC2 IAM instance metadata by reading a fact for an Amazon EC2 node.
Отчет
This issue did not affect the versions of facter as shipped with various Red Hat products as they do not use puppet and facter to control Amazon EC2 instances directly.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| OpenStack Foreman | facter | Not affected | ||
| Red Hat Enterprise Linux OpenStack Platform 5 (Icehouse) | facter | Not affected | ||
| Red Hat Enterprise Linux OpenStack Platform 6 (Juno) | facter | Not affected | ||
| Red Hat Enterprise MRG 1 | facter | Not affected | ||
| Red Hat OpenShift Enterprise 2 | facter | Not affected | ||
| Red Hat OpenStack Platform 4 | facter | Not affected | ||
| Red Hat Satellite 6 | facter | Not affected | ||
| Red Hat Subscription Asset Manager | facter | Not affected |
Показывать по
Дополнительная информация
Статус:
EPSS
1.7 Low
CVSS2
Связанные уязвимости
Puppet Labs Facter 1.6.0 through 2.4.0 allows local users to obtains sensitive Amazon EC2 IAM instance metadata by reading a fact for an Amazon EC2 node.
Puppet Labs Facter 1.6.0 through 2.4.0 allows local users to obtains sensitive Amazon EC2 IAM instance metadata by reading a fact for an Amazon EC2 node.
Puppet Labs Facter 1.6.0 through 2.4.0 allows local users to obtains s ...
Puppet Labs Facter allows local users to obtain sensitive Amazon EC2 IAM instance metadata
EPSS
1.7 Low
CVSS2