Lucene search

K
debiancveDebian Security Bug TrackerDEBIANCVE:CVE-2013-2274
HistoryMar 20, 2013 - 4:55 p.m.

CVE-2013-2274

2013-03-2016:55:00
Debian Security Bug Tracker
security-tracker.debian.org
18

6.5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

0.013 Low

EPSS

Percentile

86.0%

Puppet 2.6.x before 2.6.18 and Puppet Enterprise 1.2.x before 1.2.7 allows remote authenticated users to execute arbitrary code on the puppet master, or an agent with puppet kick enabled, via a crafted request for a report.

OSVersionArchitecturePackageVersionFilename
Debian11allpuppet< 2.7-1puppet_2.7-1_all.deb
Debian10allpuppet< 2.7-1puppet_2.7-1_all.deb

6.5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

0.013 Low

EPSS

Percentile

86.0%