Lucene search

K
debiancveDebian Security Bug TrackerDEBIANCVE:CVE-2013-1652
HistoryMar 20, 2013 - 4:55 p.m.

CVE-2013-1652

2013-03-2016:55:01
Debian Security Bug Tracker
security-tracker.debian.org
7

4.9 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:P/I:P/A:N

0.003 Low

EPSS

Percentile

69.2%

Puppet before 2.6.18, 2.7.x before 2.7.21, and 3.1.x before 3.1.1, and Puppet Enterprise before 1.2.7 and 2.7.x before 2.7.2 allows remote authenticated users with a valid certificate and private key to read arbitrary catalogs or poison the master’s cache via unspecified vectors.

OSVersionArchitecturePackageVersionFilename
Debian11allpuppet< 2.7.18-3puppet_2.7.18-3_all.deb

4.9 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:P/I:P/A:N

0.003 Low

EPSS

Percentile

69.2%