Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2012-1986HistoryMay 29, 2012 - 8:55 p.m.
CVE-2012-1986
2012-05-2920:55:07
Debian Security Bug Tracker
security-tracker.debian.org
23
CVSS2
2.1
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:H/Au:S/C:P/I:N/A:N
EPSS
0.002
Percentile
65.0%
Puppet 2.6.x before 2.6.15 and 2.7.x before 2.7.13, and Puppet Enterprise (PE) Users 1.0, 1.1, 1.2.x, 2.0.x, and 2.5.x before 2.5.1 allows remote authenticated users with an authorized SSL key and certain permissions on the puppet master to read arbitrary files via a symlink attack in conjunction with a crafted REST request for a file in a filebucket.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 11 | all | puppet | < 2.7.13-1 | puppet_2.7.13-1_all.deb |
Related
openvas
openvas
Amazon Linux: Security Advisory (ALAS-2012-75)
2015-09-08 00:00:00
Fedora Update for puppet FEDORA-2012-6674
2012-08-30 00:00:00
Fedora Update for puppet FEDORA-2012-6674
2012-08-30 00:00:00
ubuntucve
ubuntucve
CVE-2012-1986
2012-04-11 00:00:00
CVE-2012-1987
2012-04-11 00:00:00
prion
prion
Cross site request forgery (csrf)
2012-05-29 20:55:00
Design/Logic Flaw
2012-05-29 20:55:00
veracode
veracode
Symlink Attack
2019-01-15 08:51:07
cve
cve
CVE-2012-1986
2012-05-29 20:55:07
CVE-2012-1987
2012-05-29 20:55:07
amazon
amazon
Medium: puppet
2012-05-08 23:13:00
nessus
nessus
Amazon Linux AMI : puppet (ALAS-2012-75)
2013-09-04 00:00:00
Fedora 17 : puppet-2.7.13-1.fc17 (2012-6674)
2012-05-07 00:00:00
Fedora 16 : puppet-2.6.16-1.fc16 (2012-5999)
2012-04-30 00:00:00
cvelist
cvelist
CVE-2012-1986
2012-05-29 20:00:00
CVE-2012-1987
2012-05-29 20:00:00
nvd
nvd
CVE-2012-1986
2012-05-29 20:55:07
CVE-2012-1987
2012-05-29 20:55:07
debiancve
debiancve
CVE-2012-1987
2012-05-29 20:55:07
osv
osv
Puppet Denial of Service and Arbitrary File Write
2022-05-14 00:56:45
puppet - several
2012-04-13 00:00:00
github
github
Puppet Denial of Service and Arbitrary File Write
2022-05-14 00:56:45
rubygems
rubygems
Puppet Denial of Service and Arbitrary File Write
2022-05-13 21:00:00
fedora
fedora
[SECURITY] Fedora 17 Update: puppet-2.7.13-1.fc17
2012-05-06 04:52:47
[SECURITY] Fedora 16 Update: puppet-2.6.16-1.fc16
2012-04-27 05:51:26
[SECURITY] Fedora 15 Update: puppet-2.6.16-1.fc15
2012-04-27 06:05:30
debian
debian
[SECURITY] [DSA 2451-1] puppet security update
2012-04-13 04:52:10
ubuntu
ubuntu
Puppet vulnerabilities
2012-04-11 00:00:00
freebsd
freebsd
puppet -- Multiple Vulnerabilities
2012-03-26 00:00:00
gentoo
gentoo
Puppet: Multiple vulnerabilities
2012-08-14 00:00:00
CVSS2
2.1
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:H/Au:S/C:P/I:N/A:N
EPSS
0.002
Percentile
65.0%
Related for DEBIANCVE:CVE-2012-1986