critical9.8
CVE-2015-7224
puppetlabs-mysql 3.1.0 through 3.6.0 allow remote attackers to bypass authentication by leveraging creation of a database account without a password when a 'my…
Impact
puppetlabs-mysql 3.1.0 through 3.6.0 allow remote attackers to bypass authentication by leveraging creation of a database account without a password when a 'mysql_user' user parameter contains a host with a netmask.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Puppet | Puppetlabs-Mysql | from 3.1.0 through 3.6.0 |