PT-2017-15330
CVE-2017-2290
·
تاريخ النشر
2017-03-03
·
تاريخ التحديث
2021-09-09
الوصف من
CVSS 2.0
9.0
عاليةالمقاييسAV:N/AC:L/Au:S/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
mcollective-puppet-agent version 1.12.0
Description
A security issue allows a non-administrator user to create an executable that will be executed with administrator privileges on the next "mco puppet" run. This issue does not affect Puppet Enterprise users.
Recommendations
For mcollective-puppet-agent version 1.12.0, update to version 1.12.1 to resolve the issue.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾