CVE-2018-6516 On Windows only, with a specifically crafted configuration file an attacker could get Puppet PE client tools (aka pe-client-tools) 16.4.x prior to 16.4.6, 17.3.x prior to 17.3.6, and 18.1.x prior to 1...
HighCVSS 7.8
EPSS 0.85%
- Published
- Updated
- Exploit status
- No public exploit known
Description
On Windows only, with a specifically crafted configuration file an attacker could get Puppet PE client tools (aka pe-client-tools) 16.4.x prior to 16.4.6, 17.3.x prior to 17.3.6, and 18.1.x prior to 18.1.2 to load arbitrary code with privilege escalation.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| puppet enterprise client tools | >= 16.4.0, < 16.4.6 | 16.4.6 |
| puppet enterprise client tools | >= 17.3.0, < 17.3.6 | 17.3.6 |
| puppet enterprise client tools | >= 18.1.0, < 18.1.2 | 18.1.2 |
| puppet pe-client-tools | = 16.4.x prior to 16.4.6 | No fix listed |
| puppet pe-client-tools | = 17.3.x prior to 17.3.6 | No fix listed |
| puppet pe-client-tools | = 18.1.x prior to 18.1.2 | No fix listed |
References
- puppet.com vendor-advisory