Lucene search
RubySecRUBY:PUPPET-2013-3567HistoryOct 23, 2017 - 9:00 p.m.
Unauthenticated Remote Code Execution Vulnerability
2017-10-2321:00:00
RubySec
rubysec.com
5
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
Puppet 2.7.x before 2.7.22 and 3.2.x before 3.2.2, and Puppet
Enterprise before 2.8.2, deserializes untrusted YAML, which allows
remote attackers to instantiate arbitrary Ruby classes and execute
arbitrary code via a crafted REST API call.
Affected configurations
Node
rubypuppetRange2.7.21–2.8.0
ORrubypuppetRange<3.2.2
Related
openvas
openvas
Ubuntu: Security Advisory (USN-1886-1)
2013-06-24 00:00:00
SUSE: Security Advisory (SUSE-SU-2013:1304-1)
2021-06-09 00:00:00
Mageia: Security Advisory (MGASA-2013-0187)
2022-01-28 00:00:00
securityvulns
securityvulns
puppet code exeuction
2013-07-01 00:00:00
nessus
nessus
SuSE 11.2 / 11.3 Security Update : puppet / puppet, puppet-server (SAT Patch Numbers 8131 / 8132)
2013-08-07 00:00:00
Puppet Unauthenticated Remote Code Execution
2013-10-28 00:00:00
Ubuntu 12.04 LTS / 12.10 / 13.04 : puppet vulnerability (USN-1886-1)
2013-06-19 00:00:00
cvelist
cvelist
CVE-2013-3567
2013-08-19 23:00:00
suse
suse
Security update for puppet (critical)
2013-08-06 20:04:12
puppet: security fix for YAML support (critical)
2013-08-22 15:04:10
debian
debian
[SECURITY] [DSA 2715-1] puppet security update
2013-06-26 20:24:35
osv
osv
Puppet Improper Input Validation vulnerability
2017-10-24 18:33:37
mageia
mageia
Updated puppet packages fix remote code execution vulnerability
2013-06-26 22:36:33
amazon
amazon
Critical: puppet
2013-07-12 15:57:00
prion
prion
Improper access control
2013-08-19 23:55:00
veracode
veracode
Arbitrary Code Execution Through REST API Call
2019-01-15 08:59:44
cve
cve
CVE-2013-3567
2013-08-19 23:55:08
freebsd
freebsd
puppet -- Unauthenticated Remote Code Execution Vulnerability
2013-06-13 00:00:00
nvd
nvd
CVE-2013-3567
2013-08-19 23:55:08
ubuntu
ubuntu
Puppet vulnerability
2013-06-18 00:00:00
debiancve
debiancve
CVE-2013-3567
2013-08-19 23:55:08
ubuntucve
ubuntucve
CVE-2013-3567
2013-06-18 00:00:00
github
github
Puppet Improper Input Validation vulnerability
2017-10-24 18:33:37
redhat
redhat
(RHSA-2013:1284) Critical: ruby193-puppet security update
2013-09-24 00:00:00
(RHSA-2013:1283) Moderate: puppet security update
2013-09-24 00:00:00
gentoo
gentoo
Puppet: Multiple vulnerabilities
2013-08-23 00:00:00
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
Related for RUBY:PUPPET-2013-3567