Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2013-1653
HistoryMar 20, 2013 - 4:55 p.m.

CVE-2013-1653

2013-03-2016:55:01
[email protected]
web.nvd.nist.gov
44
puppet
cve-2013-1653
remote code execution
information security
vulnerability

7.1 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:H/Au:S/C:C/I:C/A:C

7.2 High

AI Score

Confidence

Low

0.014 Low

EPSS

Percentile

86.7%

JSON

Puppet before 2.6.18, 2.7.x before 2.7.21, and 3.1.x before 3.1.1, and Puppet Enterprise before 1.2.7 and 2.7.x before 2.7.2, when listening for incoming connections is enabled and allowing access to the “run” REST endpoint is allowed, allows remote authenticated users to execute arbitrary code via a crafted HTTP request.

Affected configurations

NVD
Node
puppetpuppetRange2.6.0–2.6.17
Node
puppetpuppetMatch2.7.2
OR
puppetpuppetMatch2.7.3
OR
puppetpuppetMatch2.7.4
OR
puppetpuppetMatch2.7.5
OR
puppetpuppetMatch2.7.6
OR
puppetpuppetMatch2.7.7
OR
puppetpuppetMatch2.7.8
OR
puppetpuppetMatch2.7.9
OR
puppetpuppetMatch2.7.10
OR
puppetpuppetMatch2.7.11
OR
puppetpuppetMatch2.7.12
OR
puppetpuppetMatch2.7.13
OR
puppetpuppetMatch2.7.14
OR
puppetpuppetMatch2.7.16
OR
puppetpuppetMatch2.7.17
OR
puppetpuppetMatch2.7.18
OR
puppetlabspuppetMatch2.7.0
OR
puppetlabspuppetMatch2.7.1
OR
puppetlabspuppetMatch2.7.19
OR
puppetlabspuppetMatch2.7.20
OR
puppetlabspuppetMatch2.7.20rc1
Node
puppetpuppet_enterpriseMatch3.1.0
Node
puppetlabspuppetMatch1.0enterprise
OR
puppetlabspuppetMatch1.1enterprise
OR
puppetlabspuppetMatch1.2.0enterprise
OR
puppetlabspuppetMatch1.2.1enterprise
OR
puppetlabspuppetMatch1.2.2enterprise
OR
puppetlabspuppetMatch1.2.3enterprise
OR
puppetlabspuppetMatch1.2.4enterprise
OR
puppetlabspuppetMatch1.2.5enterprise
OR
puppetlabspuppetMatch1.2.6enterprise
Node
puppetpuppet_enterpriseMatch2.7.0
OR
puppetpuppet_enterpriseMatch2.7.1
Node
canonicalubuntu_linuxMatch11.10
OR
canonicalubuntu_linuxMatch12.04lts
OR
canonicalubuntu_linuxMatch12.10
CPENameOperatorVersion
puppet:puppetpuppetle2.6.17

Related

nvd 1
debiancve 1
ubuntucve 1
cvelist 1
prion 1
securityvulns 2
openvas 10
nessus 8
ubuntu 1
fedora 2
freebsd 1
suse 1
debian 1
osv 1
gentoo 1
nvd
nvd
CVE-2013-1653
2013-03-20 16:55:01
debiancve
debiancve
CVE-2013-1653
2013-03-20 16:55:01
ubuntucve
ubuntucve
CVE-2013-1653
2013-03-12 00:00:00
cvelist
cvelist
CVE-2013-1653
2013-03-20 16:00:00
prion
prion
Cross site request forgery (csrf)
2013-03-20 16:55:00
securityvulns
securityvulns
Puppet multiple security vulnerabilities
2013-03-24 00:00:00
[USN-1759-1] Puppet vulnerabilities
2013-03-24 00:00:00
openvas
openvas
Ubuntu Update for puppet USN-1759-1
2013-03-15 00:00:00
Ubuntu: Security Advisory (USN-1759-1)
2013-03-15 00:00:00
SUSE: Security Advisory (SUSE-SU-2013:0618-1)
2021-06-09 00:00:00
nessus
nessus
Ubuntu 11.10 / 12.04 LTS / 12.10 : puppet vulnerabilities (USN-1759-1)
2013-03-13 00:00:00
Fedora 17 : puppet-2.7.21-2.fc17 (2013-4187)
2013-04-01 00:00:00
Fedora 18 : puppet-3.1.1-1.fc18 (2013-3935)
2013-08-02 00:00:00
ubuntu
ubuntu
Puppet vulnerabilities
2013-03-12 00:00:00
fedora
fedora
[SECURITY] Fedora 18 Update: puppet-3.1.1-1.fc18
2013-08-02 03:25:10
[SECURITY] Fedora 17 Update: puppet-2.7.21-2.fc17
2013-03-30 21:31:30
freebsd
freebsd
puppet27 and puppet -- multiple vulnerabilities
2013-03-13 00:00:00
suse
suse
Security update for puppet (important)
2013-04-03 23:07:06
debian
debian
[SECURITY] [DSA 2643-1] puppet security update
2013-03-12 22:48:19
osv
osv
puppet - several issues
2013-03-12 00:00:00
gentoo
gentoo
Puppet: Multiple vulnerabilities
2013-08-23 00:00:00

7.1 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:H/Au:S/C:C/I:C/A:C

7.2 High

AI Score

Confidence

Low

0.014 Low

EPSS

Percentile

86.7%

JSON
Related for CVE-2013-1653
nvd1debiancve1ubuntucve1cvelist1prion1securityvulns2openvas10nessus8ubuntu1fedora2freebsd1suse1debian1osv1gentoo1