Critical severity9.8NVD Advisory· Published Dec 21, 2017· Updated May 13, 2026
CVE-2015-7224
CVE-2015-7224
Description
puppetlabs-mysql 3.1.0 through 3.6.0 allow remote attackers to bypass authentication by leveraging creation of a database account without a password when a 'mysql_user' user parameter contains a host with a netmask.
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1- puppet.com/security/cve/CVE-2015-7224nvdVendor Advisory
News mentions
0No linked articles in our index yet.