Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2013-1655

Puppet 2.7.x before 2.7.21 and 3.1.x before 3.1.1, when running Ruby 1.9.3 or later, allows remote attackers to execute arbitrary code via vectors related to "serialized attributes."
Exploit prediction scoring system (EPSS) score
EPSS Score 0.009
EPSS Ranking 75.2%
CVSS Severity
CVSS v2 Score 7.5
Products affected by CVE-2013-1655
  • Puppet » Puppet » Version: 2.7.10
    cpe:2.3:a:puppet:puppet:2.7.10
  • Puppet » Puppet » Version: 2.7.11
    cpe:2.3:a:puppet:puppet:2.7.11
  • Puppet » Puppet » Version: 2.7.12
    cpe:2.3:a:puppet:puppet:2.7.12
  • Puppet » Puppet » Version: 2.7.13
    cpe:2.3:a:puppet:puppet:2.7.13
  • Puppet » Puppet » Version: 2.7.14
    cpe:2.3:a:puppet:puppet:2.7.14
  • Puppet » Puppet » Version: 2.7.16
    cpe:2.3:a:puppet:puppet:2.7.16
  • Puppet » Puppet » Version: 2.7.17
    cpe:2.3:a:puppet:puppet:2.7.17
  • Puppet » Puppet » Version: 2.7.18
    cpe:2.3:a:puppet:puppet:2.7.18
  • Puppet » Puppet » Version: 2.7.2
    cpe:2.3:a:puppet:puppet:2.7.2
  • Puppet » Puppet » Version: 2.7.3
    cpe:2.3:a:puppet:puppet:2.7.3
  • Puppet » Puppet » Version: 2.7.4
    cpe:2.3:a:puppet:puppet:2.7.4
  • Puppet » Puppet » Version: 2.7.5
    cpe:2.3:a:puppet:puppet:2.7.5
  • Puppet » Puppet » Version: 2.7.6
    cpe:2.3:a:puppet:puppet:2.7.6
  • Puppet » Puppet » Version: 2.7.7
    cpe:2.3:a:puppet:puppet:2.7.7
  • Puppet » Puppet » Version: 2.7.8
    cpe:2.3:a:puppet:puppet:2.7.8
  • Puppet » Puppet » Version: 2.7.9
    cpe:2.3:a:puppet:puppet:2.7.9
  • Puppet » Puppet Enterprise » Version: 3.1.0
    cpe:2.3:a:puppet:puppet_enterprise:3.1.0
  • Puppetlabs » Puppet » Version: 2.7.0
    cpe:2.3:a:puppetlabs:puppet:2.7.0
  • Puppetlabs » Puppet » Version: 2.7.1
    cpe:2.3:a:puppetlabs:puppet:2.7.1
  • Puppetlabs » Puppet » Version: 2.7.19
    cpe:2.3:a:puppetlabs:puppet:2.7.19
  • Puppetlabs » Puppet » Version: 2.7.20
    cpe:2.3:a:puppetlabs:puppet:2.7.20
  • Ruby-Lang » Ruby » Version: 1.9
    cpe:2.3:a:ruby-lang:ruby:1.9
  • Ruby-Lang » Ruby » Version: 1.9.1
    cpe:2.3:a:ruby-lang:ruby:1.9.1
  • Ruby-Lang » Ruby » Version: 1.9.2
    cpe:2.3:a:ruby-lang:ruby:1.9.2
  • Ruby-Lang » Ruby » Version: 1.9.3
    cpe:2.3:a:ruby-lang:ruby:1.9.3
  • Ruby-Lang » Ruby » Version: 2.0
    cpe:2.3:a:ruby-lang:ruby:2.0
  • Ruby-Lang » Ruby » Version: 2.0.0
    cpe:2.3:a:ruby-lang:ruby:2.0.0


Contact Us

Shodan ® - All rights reserved