Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2013-1655

Puppet 2.7.x before 2.7.21 and 3.1.x before 3.1.1, when running Ruby 1.9.3 or later, allows remote attackers to execute arbitrary code via vectors related to "serialized attributes."
Exploit prediction scoring system (EPSS) score
EPSS Score 0.008
EPSS Ranking 73.1%
CVSS Severity
CVSS v2 Score 7.5
Products affected by CVE-2013-1655
  • Puppet » Puppet » Version: 2.7.10
    cpe:2.3:a:puppet:puppet:2.7.10
  • Puppet » Puppet » Version: 2.7.11
    cpe:2.3:a:puppet:puppet:2.7.11
  • Puppet » Puppet » Version: 2.7.12
    cpe:2.3:a:puppet:puppet:2.7.12
  • Puppet » Puppet » Version: 2.7.13
    cpe:2.3:a:puppet:puppet:2.7.13
  • Puppet » Puppet » Version: 2.7.14
    cpe:2.3:a:puppet:puppet:2.7.14
  • Puppet » Puppet » Version: 2.7.16
    cpe:2.3:a:puppet:puppet:2.7.16
  • Puppet » Puppet » Version: 2.7.17
    cpe:2.3:a:puppet:puppet:2.7.17
  • Puppet » Puppet » Version: 2.7.18
    cpe:2.3:a:puppet:puppet:2.7.18
  • Puppet » Puppet » Version: 2.7.2
    cpe:2.3:a:puppet:puppet:2.7.2
  • Puppet » Puppet » Version: 2.7.3
    cpe:2.3:a:puppet:puppet:2.7.3
  • Puppet » Puppet » Version: 2.7.4
    cpe:2.3:a:puppet:puppet:2.7.4
  • Puppet » Puppet » Version: 2.7.5
    cpe:2.3:a:puppet:puppet:2.7.5
  • Puppet » Puppet » Version: 2.7.6
    cpe:2.3:a:puppet:puppet:2.7.6
  • Puppet » Puppet » Version: 2.7.7
    cpe:2.3:a:puppet:puppet:2.7.7
  • Puppet » Puppet » Version: 2.7.8
    cpe:2.3:a:puppet:puppet:2.7.8
  • Puppet » Puppet » Version: 2.7.9
    cpe:2.3:a:puppet:puppet:2.7.9
  • Puppet » Puppet Enterprise » Version: 3.1.0
    cpe:2.3:a:puppet:puppet_enterprise:3.1.0
  • Puppetlabs » Puppet » Version: 2.7.0
    cpe:2.3:a:puppetlabs:puppet:2.7.0
  • Puppetlabs » Puppet » Version: 2.7.1
    cpe:2.3:a:puppetlabs:puppet:2.7.1
  • Puppetlabs » Puppet » Version: 2.7.19
    cpe:2.3:a:puppetlabs:puppet:2.7.19
  • Puppetlabs » Puppet » Version: 2.7.20
    cpe:2.3:a:puppetlabs:puppet:2.7.20
  • Ruby-Lang » Ruby » Version: 1.9
    cpe:2.3:a:ruby-lang:ruby:1.9
  • Ruby-Lang » Ruby » Version: 1.9.1
    cpe:2.3:a:ruby-lang:ruby:1.9.1
  • Ruby-Lang » Ruby » Version: 1.9.2
    cpe:2.3:a:ruby-lang:ruby:1.9.2
  • Ruby-Lang » Ruby » Version: 1.9.3
    cpe:2.3:a:ruby-lang:ruby:1.9.3
  • Ruby-Lang » Ruby » Version: 2.0
    cpe:2.3:a:ruby-lang:ruby:2.0
  • Ruby-Lang » Ruby » Version: 2.0.0
    cpe:2.3:a:ruby-lang:ruby:2.0.0


Contact Us

Shodan ® - All rights reserved