{"action":"Upgrade facter to 2.4.1 or later.","affected":[{"fixed":"2.4.1","introduced":"1.6.0"}],"component":"facter","cve_ids":["CVE-2015-1426"],"ecosystem":"RubyGems","epss":0.00356,"exploited":false,"fixed_versions":["2.4.1"],"ghsa_id":"GHSA-j436-h7hm-rx46","id":"tcs_01M5KEKRQFMX6K02DKHF0072HP","modified_at":"2024-12-04T05:29:24.528466Z","published_at":"2022-05-14T00:56:48Z","references":["https://osv.dev/vulnerability/GHSA-j436-h7hm-rx46","https://nvd.nist.gov/vuln/detail/CVE-2015-1426","https://github.com/puppetlabs/facter","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/facter/CVE-2015-1426.yml","https://web.archive.org/web/20150906195742/http://puppetlabs.com/security/cve/cve-2015-1426","https://www.puppet.com/security/cve/cve-2015-1426-potential-sensitive-information-leakage-facters-amazon-ec2-metadata"],"severity":{"label":"low"},"sources":[{"source":"osv","source_id":"GHSA-j436-h7hm-rx46","url":"https://osv.dev/vulnerability/GHSA-j436-h7hm-rx46"}],"summary":"Puppet Labs Facter allows local users to obtain sensitive Amazon EC2 IAM instance metadata"}