Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2013-1640
HistoryMar 20, 2013 - 4:55 p.m.

CVE-2013-1640

2013-03-2016:55:01
[email protected]
web.nvd.nist.gov
1

9 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:C/I:C/A:C

7 High

AI Score

Confidence

Low

0.024 Low

EPSS

Percentile

89.9%

JSON

The (1) template and (2) inline_template functions in the master server in Puppet before 2.6.18, 2.7.x before 2.7.21, and 3.1.x before 3.1.1, and Puppet Enterprise before 1.2.7 and 2.7.x before 2.7.2 allows remote authenticated users to execute arbitrary code via a crafted catalog request.

Affected configurations

NVD
Node
puppetpuppetRange<2.6.18
Node
puppetpuppetRange2.7.0–2.7.21
Node
puppetpuppetMatch3.1.0
Node
puppetpuppet_enterpriseRange<1.2.7
Node
puppetpuppet_enterpriseMatch2.7.0
OR
puppetpuppet_enterpriseMatch2.7.1
Node
canonicalubuntu_linuxMatch11.10
OR
canonicalubuntu_linuxMatch12.04lts
OR
canonicalubuntu_linuxMatch12.10

Related

prion 1
nessus 11
amazon 1
cve 1
cvelist 1
debiancve 1
ubuntucve 1
openvas 11
freebsd 2
securityvulns 2
redhat 1
ubuntu 1
fedora 2
suse 1
debian 1
osv 1
gentoo 1
prion
prion
Cross site request forgery (csrf)
2013-03-20 16:55:00
nessus
nessus
Amazon Linux AMI : puppet (ALAS-2013-181)
2013-09-04 00:00:00
Puppet Multiple Vulnerabilities (2013/03/12)
2013-04-26 00:00:00
FreeBSD : puppet26 -- multiple vulnerabilities (04042f95-14b8-4382-a8b9-b30e365776cf)
2013-03-14 00:00:00
amazon
amazon
Medium: puppet
2013-04-11 17:32:00
cve
cve
CVE-2013-1640
2013-03-20 16:55:01
cvelist
cvelist
CVE-2013-1640
2013-03-20 16:00:00
debiancve
debiancve
CVE-2013-1640
2013-03-20 16:55:01
ubuntucve
ubuntucve
CVE-2013-1640
2013-03-12 00:00:00
openvas
openvas
Amazon Linux: Security Advisory (ALAS-2013-181)
2015-09-08 00:00:00
Ubuntu Update for puppet USN-1759-1
2013-03-15 00:00:00
Ubuntu: Security Advisory (USN-1759-1)
2013-03-15 00:00:00
freebsd
freebsd
puppet26 -- multiple vulnerabilities
2013-03-13 00:00:00
puppet27 and puppet -- multiple vulnerabilities
2013-03-13 00:00:00
securityvulns
securityvulns
Puppet multiple security vulnerabilities
2013-03-24 00:00:00
[USN-1759-1] Puppet vulnerabilities
2013-03-24 00:00:00
redhat
redhat
(RHSA-2013:0710) Important: puppet security update
2013-04-04 00:00:00
ubuntu
ubuntu
Puppet vulnerabilities
2013-03-12 00:00:00
fedora
fedora
[SECURITY] Fedora 18 Update: puppet-3.1.1-1.fc18
2013-08-02 03:25:10
[SECURITY] Fedora 17 Update: puppet-2.7.21-2.fc17
2013-03-30 21:31:30
suse
suse
Security update for puppet (important)
2013-04-03 23:07:06
debian
debian
[SECURITY] [DSA 2643-1] puppet security update
2013-03-12 22:48:19
osv
osv
puppet - several issues
2013-03-12 00:00:00
gentoo
gentoo
Puppet: Multiple vulnerabilities
2013-08-23 00:00:00

9 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:C/I:C/A:C

7 High

AI Score

Confidence

Low

0.024 Low

EPSS

Percentile

89.9%

JSON
Related for NVD:CVE-2013-1640
prion1nessus11amazon1cve1cvelist1debiancve1ubuntucve1openvas11freebsd2securityvulns2redhat1ubuntu1fedora2suse1debian1osv1gentoo1