CVE-2018-11752

Previous releases of the Puppet cisco_ios module output SSH session debug information including login credentials to a world readable file on every run. These issues have been resolved in the 0.4.0 release.

Score

CVSS 3.1 5.5 Medium

Status

Modified - security@puppet.com

Published

2018-10-02

Last modified

2024-08-05

Weaknesses

CWE-522

Affected products

• Cisco Ios (Puppet)

References

• https://puppet.com/security/cve/CVE-2018-11752