Back to Database
Status published
High
CVE-2016-9599
puppet-tripleo before versions 5.5.0, 6.2.0 is vulnerable to an access-control...
Vulnerability Description
puppet-tripleo before versions 5.5.0, 6.2.0 is vulnerable to an access-control flaw in the IPtables rules management, which allowed the creation of TCP/UDP rules with empty port values. If SSL is enabled, a malicious user could use these open ports to gain access to unauthorized resources.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2016-9599
Credits & Attribution
No credits recorded in the NVD database.
References
More from unspecified
View All →CVE-2022-4642
tatoeba2 Profile Name cross site scripting
Low
3.5
CVE-2022-4641
pig-vector LogisticRegression.java LogisticRegression temp file
Low
2.5
CVE-2022-4639
sslh Packet Dumping probe.c hexdump format string
Medium
5.6
CVE-2022-4638
collective.contact.widget widgets.py title cross site scripting
Low
3.5
CVE-2022-4631
WP-Ban ban-options.php cross site scripting
Low
3.5
Affected Vendor
unspecified
View all reports →Affected Software
puppet-tripleo
Vulnerable Versions:
puppet-tripleo 5.5.0, puppet-tripleo 6.2.0
Timeline
Official Publish:
April 23rd, 2018
Last Modified:
August 6th, 2024
Added to House:
July 20th, 2026
CVSS Vectors
V3:
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N