Published: 20/03/2013 Updated: 10/07/2019

CVSS v2 Base Score: 6.5 | Impact Score: 6.4 | Exploitability Score: 8

VMScore: 578

Vector: AV:N/AC:L/Au:S/C:P/I:P/A:P

Puppet 2.6.x prior to 2.6.18 and Puppet Enterprise 1.2.x prior to 1.2.7 allows remote authenticated users to execute arbitrary code on the puppet master, or an agent with puppet kick enabled, via a crafted request for a report.

Vulnerable Product	Search on Vulmon	Subscribe to Product
puppet puppet 2.6.14
puppet puppet 2.6.12
puppet puppet 2.6.1
puppet puppet 2.6.8
puppet puppet 2.6.0
puppet puppet 2.6.15
puppet puppet 2.6.11
puppet puppet 2.6.10
puppet puppet 2.6.5
puppetlabs puppet 2.6.17
puppet puppet 2.6.16
puppet puppet 2.6.4
puppet puppet 2.6.3
puppet puppet 2.6.2
puppet puppet 2.6.13
puppet puppet 2.6.9
puppet puppet 2.6.7
puppet puppet 2.6.6
puppet puppet enterprise 1.2.0

Synopsis Important: puppet security update Type/Severity Security Advisory: Important Topic Updated puppet packages that fix several security issues are now availablefor Red Hat OpenStack FolsomThe Red Hat Security Response Team has rated this update as havingimportant security impact Common Vulnerability ...

Multiple vulnerabilities were discovered in Puppet, a centralized configuration management system CVE-2013-1640 An authenticated malicious client may request its catalog from the puppet master, and cause the puppet master to execute arbitrary code The puppet master must be made to invoke the template or inline_template functions ...

NVD-CWE-noinfo http://secunia.com/advisories/52596 http://www.debian.org/security/2013/dsa-2643 https://puppetlabs.com/security/cve/cve-2013-2274/http://www.securityfocus.com/bid/58447 http://lists.opensuse.org/opensuse-updates/2013-04/msg00056.html http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00004.html http://rhn.redhat.com/errata/RHSA-2013-0710.html https://access.redhat.com/errata/RHSA-2013:0710 https://nvd.nist.gov https://www.debian.org/security/./dsa-2643

CVE-2013-2274

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect