PT-2017-15330

CVE-2017-2290

·

Published

2017-03-03

·

Updated

2021-09-09

Description by

CVSS 2.0
9.0
High
MetricsAV:N/AC:L/Au:S/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions mcollective-puppet-agent version 1.12.0
Description A security issue allows a non-administrator user to create an executable that will be executed with administrator privileges on the next "mco puppet" run. This issue does not affect Puppet Enterprise users.
Recommendations For mcollective-puppet-agent version 1.12.0, update to version 1.12.1 to resolve the issue.
Exploitability
Fix
Impacts
Vendors
Affected products
Weakness enumeration
CWE-732: Incorrect Permission Assignment for Critical Resource
Related identifiers
CVE-2017-2290
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com