Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2013-1653HistoryMar 20, 2013 - 4:55 p.m.
CVE-2013-1653
2013-03-2016:55:00
Debian Security Bug Tracker
security-tracker.debian.org
11
7.1 High
CVSS2
Access Vector
NETWORK
Access Complexity
HIGH
Authentication
SINGLE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:H/Au:S/C:C/I:C/A:C
0.014 Low
EPSS
Percentile
86.6%
Puppet before 2.6.18, 2.7.x before 2.7.21, and 3.1.x before 3.1.1, and Puppet Enterprise before 1.2.7 and 2.7.x before 2.7.2, when listening for incoming connections is enabled and allowing access to the “run” REST endpoint is allowed, allows remote authenticated users to execute arbitrary code via a crafted HTTP request.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 11 | all | puppet | < 2.7.18-3 | puppet_2.7.18-3_all.deb |
| Debian | 10 | all | puppet | < 2.7.18-3 | puppet_2.7.18-3_all.deb |
Related
ubuntucve
ubuntucve
CVE-2013-1653
2013-03-12 00:00:00
prion
prion
Cross site request forgery (csrf)
2013-03-20 16:55:00
cve
cve
CVE-2013-1653
2013-03-20 16:55:00
nessus
nessus
Fedora 18 : puppet-3.1.1-1.fc18 (2013-3935)
2013-08-02 00:00:00
Ubuntu 11.10 / 12.04 LTS / 12.10 : puppet vulnerabilities (USN-1759-1)
2013-03-13 00:00:00
Fedora 17 : puppet-2.7.21-2.fc17 (2013-4187)
2013-04-01 00:00:00
openvas
openvas
Ubuntu: Security Advisory (USN-1759-1)
2013-03-15 00:00:00
Ubuntu Update for puppet USN-1759-1
2013-03-15 00:00:00
Fedora Update for puppet FEDORA-2013-3935
2013-08-08 00:00:00
securityvulns
securityvulns
Puppet multiple security vulnerabilities
2013-03-24 00:00:00
[USN-1759-1] Puppet vulnerabilities
2013-03-24 00:00:00
ubuntu
ubuntu
Puppet vulnerabilities
2013-03-12 00:00:00
suse
suse
Security update for puppet (important)
2013-04-03 23:07:06
osv
osv
puppet - several issues
2013-03-12 00:00:00
debian
debian
[SECURITY] [DSA 2643-1] puppet security update
2013-03-12 22:48:49
fedora
fedora
[SECURITY] Fedora 18 Update: puppet-3.1.1-1.fc18
2013-08-02 03:25:10
[SECURITY] Fedora 17 Update: puppet-2.7.21-2.fc17
2013-03-30 21:31:30
freebsd
freebsd
puppet27 and puppet -- multiple vulnerabilities
2013-03-13 00:00:00
gentoo
gentoo
Puppet: Multiple vulnerabilities
2013-08-23 00:00:00
7.1 High
CVSS2
Access Vector
NETWORK
Access Complexity
HIGH
Authentication
SINGLE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:H/Au:S/C:C/I:C/A:C
0.014 Low
EPSS
Percentile
86.6%
Related for DEBIANCVE:CVE-2013-1653