Vulnerability Details CVE-2011-0528
Puppet 2.6.0 through 2.6.3 does not properly restrict access to node resources, which allows remote authenticated Puppet nodes to read or modify the resources of other nodes via unspecified vectors.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 49.8%
CVSS Severity
CVSS v2 Score 5.5
References
- http://www.mail-archive.com/puppet-users%40googlegroups.com/msg16429.html
- http://www.openwall.com/lists/oss-security/2011/01/27/6
- http://www.openwall.com/lists/oss-security/2011/01/31/5
- http://www.ubuntu.com/usn/USN-1365-1
- http://www.mail-archive.com/puppet-users%40googlegroups.com/msg16429.html
- http://www.openwall.com/lists/oss-security/2011/01/27/6
- http://www.openwall.com/lists/oss-security/2011/01/31/5
- http://www.ubuntu.com/usn/USN-1365-1