CVE-2013-4966

2014-03-0720:00:00

mitre

www.cve.org

6.6 Medium

AI Score

Confidence

High

0.005 Low

EPSS

Percentile

75.4%

JSON

The master external node classification script in Puppet Enterprise before 3.2.0 does not verify the identity of consoles, which allows remote attackers to create arbitrary classifications on the master by spoofing a console.

References

puppetlabs.com/security/cve/cve-2013-4966

www.securitytracker.com/id/1029873