PT-2014-2106

CVE-2011-0528

Publicado

2014-02-17

Atualizado

2022-05-14

Descrição por

CVSS 2.0

5.5

Média

MétricasAV:N/AC:L/Au:S/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Puppet versions 2.6.0 through 2.6.3

Description The issue allows remote authenticated Puppet nodes to read or modify the resources of other nodes due to improper access restrictions to node resources.

Recommendations For Puppet versions 2.6.0 through 2.6.3, update to a version that properly restricts access to node resources to prevent unauthorized reading or modification of node resources.

Explorabilidade

Exploit

Correção

Impactos

Pesquisadores

Fornecedores

Produtos afetados

Enumeração de fraquezas

CWE-284: Improper Access Control

CWE-264

Identificadores relacionados

CVE-2011-0528