CVE-2022-0675CWE-1289

Puppet Firewall Module May Leave Unmanaged Rules

Medium · published March 2, 2022

CVSS v3.1
5.6
EPSS
1%
Percentile
59.8
In the wild
Unconfirmed
What it is

In certain situations it is possible for an unmanaged rule to exist on the target system that has the same comment as the rule specified in the manifest. This could allow for unmanaged rules to exist on the target system and leave the system in an unsafe state.

The record
Technical detail
CVSS v3.1
5.6 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00918 · 59.8th percentile
Weakness
CWE-1289 · Improper Validation of Unsafe Equivalence in Input
Published
2022-03-02T21:00Z
EPSS history
Timeline
  • 02 MAR 21:00Z
    Puppet Firewall Module May Leave Unmanaged Rules
    cvelistv5