CVE-2015-7224 | BDVDB-2026-94364 Detail

Description#

puppetlabs-mysql 3.1.0 through 3.6.0 allow remote attackers to bypass authentication by leveraging creation of a database account without a password when a 'mysql_user' user parameter contains a host with a netmask.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://puppet.com/security/cve/CVE-2015-7224

Exploit#

No public exploit known

History#

Version 12017-12-21Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.