参照： Official debian advisory, NVD, CVE.org · CVE 詳細
Freshness: upstream tracker timestamp is available; use API updated time as primary recency signal.
CVE-2015-1029 not yet assigned priority: Debian including 1 source packages (puppet-module-puppetlabs-stdlib), 4 status rows across 4 suites (bookworm, bullseye, sid, trixie): resolved 4.
The puppetlabs-stdlib module 2.1 through 3.0 and 4.1.0 through 4.5.x before 4.5.1 for Puppet 2.8.8 and earlier allows remote authenticated users to gain privileges or obtain sensitive information by prepopulating the fact cache.