Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2013-4761
HistoryAug 20, 2013 - 10:55 p.m.

CVE-2013-4761

2013-08-2022:55:04
[email protected]
web.nvd.nist.gov

5.1 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

7.2 High

AI Score

Confidence

Low

0.011 Low

EPSS

Percentile

84.2%

JSON

Unspecified vulnerability in Puppet 2.7.x before 2.7.23 and 3.2.x before 3.2.4, and Puppet Enterprise 2.8.x before 2.8.3 and 3.0.x before 3.0.1, allows remote attackers to execute arbitrary Ruby programs from the master via the resource_type service. NOTE: this vulnerability can only be exploited utilizing unspecified “local file system access” to the Puppet Master.

Affected configurations

NVD
Node
puppetpuppetMatch3.2.1
OR
puppetpuppetMatch3.2.2
OR
puppetpuppetMatch3.2.3
OR
puppetlabspuppetMatch3.2.0
Node
puppetpuppetMatch2.7.2
OR
puppetlabspuppetMatch2.7.0
OR
puppetlabspuppetMatch2.7.1
Node
puppetpuppet_enterpriseMatch2.8.0
OR
puppetpuppet_enterpriseMatch2.8.1
OR
puppetpuppet_enterpriseMatch2.8.2
OR
puppetpuppet_enterpriseMatch3.0.0

Related

suse 2
openvas 13
nessus 12
cve 1
debiancve 1
ubuntucve 1
prion 1
osv 2
github 1
cvelist 1
ubuntu 1
mageia 1
freebsd 1
securityvulns 2
debian 1
amazon 1
redhat 2
fedora 1
gentoo 1
suse
suse
Security update for puppet (important)
2014-04-10 19:04:13
Security update for puppet (important)
2014-01-28 19:06:41
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2014:0155-1)
2021-06-09 00:00:00
SUSE: Security Advisory for puppet (SUSE-SU-2014:0155-1)
2015-10-13 00:00:00
SUSE: Security Advisory (SUSE-SU-2014:0510-1)
2021-06-09 00:00:00
nessus
nessus
SuSE 11.2 / 11.3 Security Update : puppet (SAT Patch Numbers 8811 / 8812)
2014-01-29 00:00:00
SuSE 11.3 Security Update : puppet (SAT Patch Number 9033)
2014-04-11 00:00:00
Ubuntu 12.04 LTS / 12.10 / 13.04 : puppet vulnerabilities (USN-1928-1)
2013-08-16 00:00:00
cve
cve
CVE-2013-4761
2013-08-20 22:55:04
debiancve
debiancve
CVE-2013-4761
2013-08-20 22:55:04
ubuntucve
ubuntucve
CVE-2013-4761
2013-08-15 00:00:00
prion
prion
Code injection
2013-08-20 22:55:00
osv
osv
Puppet allows remote attackers to execute arbitrary Ruby programs from the master via the resource_type service
2017-10-24 18:33:37
puppet - several
2013-09-19 00:00:00
github
github
Puppet allows remote attackers to execute arbitrary Ruby programs from the master via the resource_type service
2017-10-24 18:33:37
cvelist
cvelist
CVE-2013-4761
2013-08-20 22:00:00
ubuntu
ubuntu
Puppet vulnerabilities
2013-08-15 00:00:00
mageia
mageia
Updated puppet and puppet3 package fix security vulnerabilities
2013-08-26 23:44:50
freebsd
freebsd
puppet -- multiple vulnerabilities
2013-07-05 00:00:00
securityvulns
securityvulns
puppet security vulnerabilities
2013-10-02 00:00:00
[USN-1928-1] Puppet vulnerabilities
2013-10-02 00:00:00
debian
debian
[SECURITY] [DSA 2761-1] puppet security update
2013-09-19 21:56:01
amazon
amazon
Medium: puppet
2013-09-04 13:30:00
redhat
redhat
(RHSA-2013:1284) Critical: ruby193-puppet security update
2013-09-24 00:00:00
(RHSA-2013:1283) Moderate: puppet security update
2013-09-24 00:00:00
fedora
fedora
[SECURITY] Fedora 19 Update: puppet-3.4.2-1.fc19
2014-01-23 11:13:28
gentoo
gentoo
Puppet: Multiple vulnerabilities
2013-08-23 00:00:00

5.1 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

7.2 High

AI Score

Confidence

Low

0.011 Low

EPSS

Percentile

84.2%

JSON
Related for NVD:CVE-2013-4761
suse2openvas13nessus12cve1debiancve1ubuntucve1prion1osv2github1cvelist1ubuntu1mageia1freebsd1securityvulns2debian1amazon1redhat2fedora1gentoo1