CVE-2015-6501

MEDIUM

Puppet Enterprise < 2015.2.0 - Open Redirect via String Parameter

Title source: llm

Description

Open redirect vulnerability in the Console in Puppet Enterprise before 2015.2.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the string parameter.

References (2)

Core 2

Core References

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/93845

Vendor Advisory x_refsource_confirm

https://puppet.com/security/cve/CVE-2015-6501

Scores

CVSS v3 6.1

EPSS 0.0122

EPSS Percentile 64.8%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Details

CWE

CWE-601

Status published

Products (1)

puppet/puppet_enterprise < 2015.2.0

Published Jan 12, 2017

Tracked Since Feb 18, 2026