Puppet Puppetlabs-Mysql
3 CVEs affecting Puppet Puppetlabs-Mysql. Latest disclosed: 2022-10-07. Critical: 1, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2015-7224 | Critical | 9.8 | 2017-12-21 | puppetlabs-mysql 3.1.0 through 3.6.0 allow remote attackers to bypass authentication by leveraging creation of a database account without a password when a 'my… |
CVE-2022-3276 | High | 8.4 | 2022-10-07 | Command injection is possible in the puppetlabs-mysql module prior to version 13.0.0. A malicious actor is able to exploit this vulnerability only if they are… |
CVE-2022-3275 | High | 8.4 | 2022-10-07 | Command injection is possible in the puppetlabs-apt module prior to version 9.0.0. A malicious actor is able to exploit this vulnerability only if they are abl… |