PT-2014-2106
CVE-2011-0528
·
Published
2014-02-17
·
Updated
2022-05-14
Description by
CVSS 2.0
5.5
MediumMetricsAV:N/AC:L/Au:S/C:P/I:P/A:N
Name of the Vulnerable Software and Affected Versions
Puppet versions 2.6.0 through 2.6.3
Description
The issue allows remote authenticated Puppet nodes to read or modify the resources of other nodes due to improper access restrictions to node resources.
Recommendations
For Puppet versions 2.6.0 through 2.6.3, update to a version that properly restricts access to node resources to prevent unauthorized reading or modification of node resources.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾