PT-2017-7030
CVE-2015-6502
·
تاريخ النشر
2017-12-11
·
تاريخ التحديث
2022-01-24
الوصف من
CVSS 2.0
4.3
متوسطةالمقاييسAV:N/AC:M/Au:N/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions
Puppet Enterprise versions prior to 2015.2.1
Description
The issue allows remote attackers to inject arbitrary web script or HTML via the
string parameter, related to Login Redirect. This is a cross-site scripting (XSS) vulnerability in the console.Recommendations
For versions prior to 2015.2.1, update to version 2015.2.1 or later to resolve the issue. As a temporary workaround, consider restricting access to the console to minimize the risk of exploitation. Avoid using the
string parameter in affected areas until the issue is resolved. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾