Lucene search
HistoryMay 08, 2014 - 2:29 p.m.
CVE-2013-0210
cve-2013-0210
smart proxy
puppet run api
foreman
security vulnerability
nvd
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.8 High
AI Score
Confidence
Low
0.003 Low
EPSS
Percentile
68.8%
The smart proxy Puppet run API in Foreman before 1.2.0 allows remote attackers to execute arbitrary commands via vectors related to escaping and Puppet commands.
Affected configurations
Node
theforemanforemanRange≤1.0
ORtheforemanforemanMatch0.1
ORtheforemanforemanMatch0.2
ORtheforemanforemanMatch0.3
ORtheforemanforemanMatch0.4
ORtheforemanforemanMatch0.4.1
References
Related
cvelist
cvelist
CVE-2013-0210
2014-05-08 14:00:00
nvd
nvd
CVE-2013-0210
2014-05-08 14:29:07
prion
prion
Command injection
2014-05-08 14:29:00
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.8 High
AI Score
Confidence
Low
0.003 Low
EPSS
Percentile
68.8%
Related for CVE-2013-0210