CVE-2012-1986 Puppet 2.6.x before 2.6.15 and 2.7.x before 2.7.13, and Puppet Enterprise (PE) Users 1.0, 1.1, 1.2.x, 2.0.x, and 2.5.x before 2.5.1 allows remote authenticated users with an authorized SSL key and cer...
LowCVSS 2.1
EPSS 1.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Puppet 2.6.x before 2.6.15 and 2.7.x before 2.7.13, and Puppet Enterprise (PE) Users 1.0, 1.1, 1.2.x, 2.0.x, and 2.5.x before 2.5.1 allows remote authenticated users with an authorized SSL key and certain permissions on the puppet master to read arbitrary files via a symlink attack in conjunction with a crafted REST request for a file in a filebucket.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/puppet(Debian:11) | < 2.7.13-1 | 2.7.13-1 |
| puppet | = 2.6.0 | No fix listed |
| puppet | = 2.6.1 | No fix listed |
| puppet | = 2.6.2 | No fix listed |
| puppet | = 2.6.3 | No fix listed |
| puppet | = 2.6.4 | No fix listed |
| puppet | = 2.6.5 | No fix listed |
| puppet | = 2.6.6 | No fix listed |
| puppet | = 2.6.7 | No fix listed |
| puppet | = 2.6.8 | No fix listed |
| puppet | = 2.6.9 | No fix listed |
| puppet | = 2.6.10 | No fix listed |
| puppet | = 2.6.11 | No fix listed |
| puppet | = 2.6.12 | No fix listed |
| puppet | = 2.6.13 | No fix listed |
| puppet | = 2.6.14 | No fix listed |
| puppet | = 2.7.2 | No fix listed |
| puppet | = 2.7.3 | No fix listed |
| puppet | = 2.7.4 | No fix listed |
| puppet | = 2.7.5 | No fix listed |
| puppet | = 2.7.6 | No fix listed |
| puppet | = 2.7.7 | No fix listed |
| puppet | = 2.7.8 | No fix listed |
| puppet | = 2.7.9 | No fix listed |
| puppet | = 2.7.10 | No fix listed |
Show 14 more
| Product | Affected versions | Fixed in |
|---|---|---|
| puppet | = 2.7.11 | No fix listed |
| puppet enterprise | = 2.5.0 | No fix listed |
| puppet enterprise | = 1.2.0 | No fix listed |
| puppet enterprise | = 1.2.1 | No fix listed |
| puppet enterprise | = 1.2.2 | No fix listed |
| puppet enterprise | = 1.2.3 | No fix listed |
| puppet enterprise | = 1.2.4 | No fix listed |
| puppet enterprise | = 2.0.0 | No fix listed |
| puppet enterprise | = 2.0.1 | No fix listed |
| puppet enterprise | = 2.0.2 | No fix listed |
| puppetlabs puppet | = 2.7.0 | No fix listed |
| puppetlabs puppet | = 2.7.1 | No fix listed |
| puppetlabs puppet enterprise users | = 1.0 | No fix listed |
| puppetlabs puppet enterprise users | = 1.1 | No fix listed |
References
- security-tracker.debian.org vendor-advisory
- FEDORA-2012-5999 vendor-advisory
- FEDORA-2012-6055 vendor-advisory
- FEDORA-2012-6674 vendor-advisory
- projects.puppetlabs.com
- projects.puppetlabs.com
- puppetlabs.com vendor-advisory
- 48743 third-party-advisory vendor-advisory
- 48748 third-party-advisory vendor-advisory
- 48789 third-party-advisory vendor-advisory
- 49136 third-party-advisory vendor-advisory
- USN-1419-1 vendor-advisory
- DSA-2451 vendor-advisory
- 52975 vdb-entry
- puppet-rest-symlink(74794) vdb-entry
- openSUSE-SU-2012:0608 vendor-advisory
- openSUSE-SU-2012:0835 vendor-advisory