Lucene search

K

PRIOn knowledge basePRION:CVE-2012-3866

HistoryAug 06, 2012 - 4:55 p.m.

Design/Logic Flaw

2012-08-0616:55:00

PRIOn knowledge base

www.prio-n.com

7

6 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%

lib/puppet/defaults.rb in Puppet 2.7.x before 2.7.18, and Puppet Enterprise before 2.5.2, uses 0644 permissions for last_run_report.yaml, which allows local users to obtain sensitive configuration information by leveraging access to the puppet master server to read this file.

CPENameOperatorVersion
puppeteq2.7.2
puppeteq2.7.3
puppeteq2.7.4
puppeteq2.7.5
puppeteq2.7.6
puppeteq2.7.8
puppeteq2.7.9
puppeteq2.7.10
puppeteq2.7.11
puppeteq2.7.12

Rows per page:

1-10 of 171

References

lists.opensuse.org/opensuse-updates/2012-07/msg00036.html

puppetlabs.com/security/cve/cve-2012-3866/

secunia.com/advisories/50014

www.debian.org/security/2012/dsa-2511

www.ubuntu.com/usn/USN-1506-1

bugzilla.redhat.com/show_bug.cgi?id=839135

github.com/puppetlabs/puppet/commit/fd44bf5e6d0d360f6a493d663b653c121fa83c3f

6 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%

Related for PRION:CVE-2012-3866

cve1 cvelist1 ubuntucve1 github1 debiancve1 osv2 nvd1 nessus6 openvas13 securityvulns2 ubuntu1 debian1 freebsd1 amazon1 fedora3