CVE-2022-0675mediumCWE-1289

CVE-2022-0675: medium-severity vulnerability in Puppet Firewall Module

Puppet Firewall Module May Leave Unmanaged Rules

Published · Updated

Follow this CVE+ Monitor Firewall Module+ Monitor puppet-module-puppetlabs-firewall

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 5.6epss 0.9%
In certain situations it is possible for an unmanaged rule to exist on the target system that has the same comment as the rule specified in the manifest. This could allow for unmanaged rules to exist on the target system and leave the system in an unsafe state.
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L
Affected products
Puppet · Firewall Module