VYPR
← All advisories
Medium severity5.5OSV Advisory· Published Oct 2, 2018· Updated Jun 17, 2026

CVE-2018-11752

CVE-2018-11752

Description

Previous releases of the Puppet cisco_ios module output SSH session debug information including login credentials to a world readable file on every run. These issues have been resolved in the 0.4.0 release.

Affected products

3
  • Puppet (software)/Cisco Iosllm-fuzzy3 versions
    <0.4.0+ 2 more
    • (no CPE)range: <0.4.0
    • cpe:2.3:a:puppet:cisco_ios:*:*:*:*:*:puppet:*:*range: <0.4.0
    • (no CPE)range: 0.1.0, Resource_API_Only

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.