low2.1
CVE-2015-1426
Puppet Labs Facter 1.6.0 through 2.4.0 allows local users to obtains sensitive Amazon EC2 IAM instance metadata by reading a fact for an Amazon EC2 node.
Impact
Puppet Labs Facter 1.6.0 through 2.4.0 allows local users to obtains sensitive Amazon EC2 IAM instance metadata by reading a fact for an Amazon EC2 node.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Puppet | Facter | Versions 1.6.0, 1.6.1, 1.6.2, 1.6.3, 1.6.4, 1.6.5 |
| Puppetlabs | Facter | Versions 1.6.1, 1.6.2, 1.6.3, 1.6.4, 1.6.5, 1.6.6 |