CVE-2015-1426

RubyGems/facter CVE-2015-1426: low

Puppet Labs Facter allows local users to obtain sensitive Amazon EC2 IAM instance metadata

Action: Upgrade facter to 2.4.1 or later.

bundle update facter

Affected

Fixed versions

Sources

• osv: GHSA-j436-h7hm-rx46
• https://nvd.nist.gov/vuln/detail/CVE-2015-1426
• https://github.com/puppetlabs/facter
• https://github.com/rubysec/ruby-advisory-db/blob/master/gems/facter/CVE-2015-1426.yml
• https://web.archive.org/web/20150906195742/http://puppetlabs.com/security/cve/cve-2015-1426
• https://www.puppet.com/security/cve/cve-2015-1426-potential-sensitive-information-leakage-facters-amazon-ec2-metadata

CVE-2015-1426 · published 2022-05-14T00:56:48Z · modified 2024-12-04T05:29:24.528466Z · JSON