PT-2023-31931 · Puppet · Puppet Bolt

CVE-2023-5214

Publicado

2023-10-06

Atualizado

2023-11-02

CVSS v3.1

9.8

Crítica

Vetor

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Puppet Bolt versions prior to 3.27.4

Description A path to escalate privileges was identified in Puppet Bolt.

Recommendations For versions prior to 3.27.4, update to version 3.27.4 or later to resolve the issue.

Exploit

Correção

Improper Privilege Management

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

CVE-2023-5214

GHSA-289M-2964-F8Q5

Puppet Bolt