Product

reductivelabs puppet vulnerabilities

1 published CVE affecting reductivelabs puppet, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total: 1
Critical: 0
High: 0
Medium: 1
Low: 0
Unscored: 0
CISA KEV: 0

Latest reductivelabs puppet CVEs

Newest publication first

CVE-2009-3564 puppetmasterd in puppet 0.24.6 does not reset supplementary groups when it switches to a different user, which might allow local users to access restricted files.
Published 2009-10-06

MediumCVSS 4.7 EPSS 0.38%

puppetmasterd in puppet 0.24.6 does not reset supplementary groups when it switches to a different user, which might allow local users to access restricted files.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.

reductivelabs puppet vulnerabilities

Latest reductivelabs puppet CVEs

CVE-2009-3564 puppetmasterd in puppet 0.24.6 does not reset supplementary groups when it switches to a different user, which might allow local users to access restricted files.