Medium severity6.1NVD Advisory· Published Jan 12, 2017· Updated Jun 17, 2026
CVE-2015-6501
CVE-2015-6501
Description
Open redirect vulnerability in the Console in Puppet Enterprise before 2015.2.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the string parameter.
Affected products
2cpe:2.3:a:puppet:puppet_enterprise:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:puppet:puppet_enterprise:*:*:*:*:*:*:*:*range: <=2015.2.0
- (no CPE)range: <2015.2.1
Patches
Vulnerability mechanics
References
2- www.securityfocus.com/bid/93845nvdThird Party AdvisoryVDB Entry
- puppet.com/security/cve/CVE-2015-6501nvdVendor Advisory
News mentions
0No linked articles in our index yet.