CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2012-3865

Directory traversal vulnerability in lib/puppet/reports/store.rb in Puppet before 2.6.17 and 2.7.x before 2.7.18, and Puppet Enterprise before 2.5.2, when Delete is enabled in auth.conf, allows remote authenticated users to delete arbitrary files on the puppet master server via a .. (dot dot) in a node name.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.021

EPSS Ranking 83.5%

CVSS Severity

CVSS v2 Score 3.5

References

Products affected by CVE-2012-3865

Puppet » Puppet » Version: 2.6.0

cpe:2.3:a:puppet:puppet:2.6.0
Puppet » Puppet » Version: 2.6.1

cpe:2.3:a:puppet:puppet:2.6.1
Puppet » Puppet » Version: 2.6.10

cpe:2.3:a:puppet:puppet:2.6.10
Puppet » Puppet » Version: 2.6.11

cpe:2.3:a:puppet:puppet:2.6.11
Puppet » Puppet » Version: 2.6.12

cpe:2.3:a:puppet:puppet:2.6.12
Puppet » Puppet » Version: 2.6.13

cpe:2.3:a:puppet:puppet:2.6.13
Puppet » Puppet » Version: 2.6.14

cpe:2.3:a:puppet:puppet:2.6.14
Puppet » Puppet » Version: 2.6.15

cpe:2.3:a:puppet:puppet:2.6.15
Puppet » Puppet » Version: 2.6.2

cpe:2.3:a:puppet:puppet:2.6.2
Puppet » Puppet » Version: 2.6.3

cpe:2.3:a:puppet:puppet:2.6.3
Puppet » Puppet » Version: 2.6.4

cpe:2.3:a:puppet:puppet:2.6.4
Puppet » Puppet » Version: 2.6.5

cpe:2.3:a:puppet:puppet:2.6.5
Puppet » Puppet » Version: 2.6.6

cpe:2.3:a:puppet:puppet:2.6.6
Puppet » Puppet » Version: 2.6.7

cpe:2.3:a:puppet:puppet:2.6.7
Puppet » Puppet » Version: 2.6.8

cpe:2.3:a:puppet:puppet:2.6.8
Puppet » Puppet » Version: 2.6.9

cpe:2.3:a:puppet:puppet:2.6.9
Puppet » Puppet » Version: 2.7.10

cpe:2.3:a:puppet:puppet:2.7.10
Puppet » Puppet » Version: 2.7.11

cpe:2.3:a:puppet:puppet:2.7.11
Puppet » Puppet » Version: 2.7.12

cpe:2.3:a:puppet:puppet:2.7.12
Puppet » Puppet » Version: 2.7.13

cpe:2.3:a:puppet:puppet:2.7.13
Puppet » Puppet » Version: 2.7.14

cpe:2.3:a:puppet:puppet:2.7.14
Puppet » Puppet » Version: 2.7.16

cpe:2.3:a:puppet:puppet:2.7.16
Puppet » Puppet » Version: 2.7.2

cpe:2.3:a:puppet:puppet:2.7.2
Puppet » Puppet » Version: 2.7.3

cpe:2.3:a:puppet:puppet:2.7.3
Puppet » Puppet » Version: 2.7.4

cpe:2.3:a:puppet:puppet:2.7.4
Puppet » Puppet » Version: 2.7.5

cpe:2.3:a:puppet:puppet:2.7.5
Puppet » Puppet » Version: 2.7.6

cpe:2.3:a:puppet:puppet:2.7.6
Puppet » Puppet » Version: 2.7.8

cpe:2.3:a:puppet:puppet:2.7.8
Puppet » Puppet » Version: 2.7.9

cpe:2.3:a:puppet:puppet:2.7.9
Puppet » Puppet Enterprise » Version: N/A

cpe:2.3:a:puppet:puppet_enterprise:-
Puppet » Puppet Enterprise » Version: 1.0

cpe:2.3:a:puppet:puppet_enterprise:1.0
Puppet » Puppet Enterprise » Version: 1.1

cpe:2.3:a:puppet:puppet_enterprise:1.1
Puppet » Puppet Enterprise » Version: 1.2.0

cpe:2.3:a:puppet:puppet_enterprise:1.2.0
Puppet » Puppet Enterprise » Version: 1.2.1

cpe:2.3:a:puppet:puppet_enterprise:1.2.1
Puppet » Puppet Enterprise » Version: 1.2.2

cpe:2.3:a:puppet:puppet_enterprise:1.2.2
Puppet » Puppet Enterprise » Version: 1.2.3

cpe:2.3:a:puppet:puppet_enterprise:1.2.3
Puppet » Puppet Enterprise » Version: 1.2.4

cpe:2.3:a:puppet:puppet_enterprise:1.2.4
Puppet » Puppet Enterprise » Version: 1.2.5

cpe:2.3:a:puppet:puppet_enterprise:1.2.5
Puppet » Puppet Enterprise » Version: 1.2.6

cpe:2.3:a:puppet:puppet_enterprise:1.2.6
Puppet » Puppet Enterprise » Version: 1.2.7

cpe:2.3:a:puppet:puppet_enterprise:1.2.7
Puppet » Puppet Enterprise » Version: 2.0.0

cpe:2.3:a:puppet:puppet_enterprise:2.0.0
Puppet » Puppet Enterprise » Version: 2.0.1

cpe:2.3:a:puppet:puppet_enterprise:2.0.1
Puppet » Puppet Enterprise » Version: 2.0.2

cpe:2.3:a:puppet:puppet_enterprise:2.0.2
Puppet » Puppet Enterprise » Version: 2.0.3

cpe:2.3:a:puppet:puppet_enterprise:2.0.3
Puppet » Puppet Enterprise » Version: 2.5.0

cpe:2.3:a:puppet:puppet_enterprise:2.5.0
Puppet » Puppet Enterprise » Version: 2.5.1

cpe:2.3:a:puppet:puppet_enterprise:2.5.1
Puppetlabs » Puppet » Version: 0.25.0

cpe:2.3:a:puppetlabs:puppet:0.25.0
Puppetlabs » Puppet » Version: 0.25.1

cpe:2.3:a:puppetlabs:puppet:0.25.1
Puppetlabs » Puppet » Version: 0.25.2

cpe:2.3:a:puppetlabs:puppet:0.25.2
Puppetlabs » Puppet » Version: 0.25.3

cpe:2.3:a:puppetlabs:puppet:0.25.3
Puppetlabs » Puppet » Version: 0.25.4

cpe:2.3:a:puppetlabs:puppet:0.25.4
Puppetlabs » Puppet » Version: 0.25.5

cpe:2.3:a:puppetlabs:puppet:0.25.5
Puppetlabs » Puppet » Version: 0.25.6

cpe:2.3:a:puppetlabs:puppet:0.25.6
Puppetlabs » Puppet » Version: 1.0

cpe:2.3:a:puppetlabs:puppet:1.0
Puppetlabs » Puppet » Version: 1.1

cpe:2.3:a:puppetlabs:puppet:1.1
Puppetlabs » Puppet » Version: 1.2

cpe:2.3:a:puppetlabs:puppet:1.2
Puppetlabs » Puppet » Version: 2.0.0

cpe:2.3:a:puppetlabs:puppet:2.0.0
Puppetlabs » Puppet » Version: 2.0.1

cpe:2.3:a:puppetlabs:puppet:2.0.1
Puppetlabs » Puppet » Version: 2.0.2

cpe:2.3:a:puppetlabs:puppet:2.0.2
Puppetlabs » Puppet » Version: 2.0.3

cpe:2.3:a:puppetlabs:puppet:2.0.3
Puppetlabs » Puppet » Version: 2.5.1

cpe:2.3:a:puppetlabs:puppet:2.5.1
Puppetlabs » Puppet » Version: 2.5.2

cpe:2.3:a:puppetlabs:puppet:2.5.2
Puppetlabs » Puppet » Version: 2.6.0

cpe:2.3:a:puppetlabs:puppet:2.6.0
Puppetlabs » Puppet » Version: 2.6.1

cpe:2.3:a:puppetlabs:puppet:2.6.1
Puppetlabs » Puppet » Version: 2.6.10

cpe:2.3:a:puppetlabs:puppet:2.6.10
Puppetlabs » Puppet » Version: 2.6.11

cpe:2.3:a:puppetlabs:puppet:2.6.11
Puppetlabs » Puppet » Version: 2.6.12

cpe:2.3:a:puppetlabs:puppet:2.6.12
Puppetlabs » Puppet » Version: 2.6.13

cpe:2.3:a:puppetlabs:puppet:2.6.13
Puppetlabs » Puppet » Version: 2.6.14

cpe:2.3:a:puppetlabs:puppet:2.6.14
Puppetlabs » Puppet » Version: 2.6.15

cpe:2.3:a:puppetlabs:puppet:2.6.15
Puppetlabs » Puppet » Version: 2.6.16

cpe:2.3:a:puppetlabs:puppet:2.6.16
Puppetlabs » Puppet » Version: 2.6.2

cpe:2.3:a:puppetlabs:puppet:2.6.2
Puppetlabs » Puppet » Version: 2.6.3

cpe:2.3:a:puppetlabs:puppet:2.6.3
Puppetlabs » Puppet » Version: 2.6.4

cpe:2.3:a:puppetlabs:puppet:2.6.4
Puppetlabs » Puppet » Version: 2.6.5

cpe:2.3:a:puppetlabs:puppet:2.6.5
Puppetlabs » Puppet » Version: 2.6.6

cpe:2.3:a:puppetlabs:puppet:2.6.6
Puppetlabs » Puppet » Version: 2.6.7

cpe:2.3:a:puppetlabs:puppet:2.6.7
Puppetlabs » Puppet » Version: 2.6.8

cpe:2.3:a:puppetlabs:puppet:2.6.8
Puppetlabs » Puppet » Version: 2.6.9

cpe:2.3:a:puppetlabs:puppet:2.6.9
Puppetlabs » Puppet » Version: 2.7.0

cpe:2.3:a:puppetlabs:puppet:2.7.0
Puppetlabs » Puppet » Version: 2.7.1

cpe:2.3:a:puppetlabs:puppet:2.7.1
Puppetlabs » Puppet » Version: 2.7.10

cpe:2.3:a:puppetlabs:puppet:2.7.10
Puppetlabs » Puppet » Version: 2.7.11

cpe:2.3:a:puppetlabs:puppet:2.7.11
Puppetlabs » Puppet » Version: 2.7.12

cpe:2.3:a:puppetlabs:puppet:2.7.12
Puppetlabs » Puppet » Version: 2.7.13

cpe:2.3:a:puppetlabs:puppet:2.7.13
Puppetlabs » Puppet » Version: 2.7.14

cpe:2.3:a:puppetlabs:puppet:2.7.14
Puppetlabs » Puppet » Version: 2.7.16

cpe:2.3:a:puppetlabs:puppet:2.7.16
Puppetlabs » Puppet » Version: 2.7.17

cpe:2.3:a:puppetlabs:puppet:2.7.17
Puppetlabs » Puppet » Version: 2.7.2

cpe:2.3:a:puppetlabs:puppet:2.7.2
Puppetlabs » Puppet » Version: 2.7.3

cpe:2.3:a:puppetlabs:puppet:2.7.3
Puppetlabs » Puppet » Version: 2.7.4

cpe:2.3:a:puppetlabs:puppet:2.7.4
Puppetlabs » Puppet » Version: 2.7.5

cpe:2.3:a:puppetlabs:puppet:2.7.5
Puppetlabs » Puppet » Version: 2.7.6

cpe:2.3:a:puppetlabs:puppet:2.7.6
Puppetlabs » Puppet » Version: 2.7.7

cpe:2.3:a:puppetlabs:puppet:2.7.7
Puppetlabs » Puppet » Version: 2.7.8

cpe:2.3:a:puppetlabs:puppet:2.7.8
Puppetlabs » Puppet » Version: 2.7.9

cpe:2.3:a:puppetlabs:puppet:2.7.9

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2012-3865

Products

Pricing

Contact Us