VYPR
← All advisories
Medium severity5.5OSV Advisory· Published Oct 2, 2018· Updated Jun 17, 2026

CVE-2018-11752

CVE-2018-11752

Description

Previous releases of the Puppet cisco_ios module output SSH session debug information including login credentials to a world readable file on every run. These issues have been resolved in the 0.4.0 release.

Affected products

2
  • Puppet (software)/Cisco IosOSV2 versions
    0.1.0, Resource_API_Only+ 1 more
    • (no CPE)range: 0.1.0, Resource_API_Only
    • (no CPE)range: <0.4.0

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.