CVE-2018-6514

2018-06-1100:00:00

puppet

www.cve.org

0.001 Low

EPSS

Percentile

27.2%

JSON

In Puppet Agent 1.10.x prior to 1.10.13, Puppet Agent 5.3.x prior to 5.3.7, Puppet Agent 5.5.x prior to 5.5.2, Facter on Windows is vulnerable to a DLL preloading attack, which could lead to a privilege escalation.

CNA Affected

[
  {
    "product": "Puppet Agent",
    "vendor": "Puppet",
    "versions": [
      {
        "status": "affected",
        "version": "Puppet Agent 1.10.x prior to 1.10.13, Puppet Agent 5.3.x prior to 5.3.7, Puppet Agent 5.5.x prior to 5.5.2"
      }
    ]
  }
]

References

puppet.com/security/cve/CVE-2018-6514

0.001 Low

EPSS

Percentile

27.2%

JSON

Related for CVELIST:CVE-2018-6514