Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
prionPRIOn knowledge basePRION:CVE-2012-3864
HistoryAug 06, 2012 - 4:55 p.m.

Cross site request forgery (csrf)

2012-08-0616:55:00
PRIOn knowledge base
www.prio-n.com
7

6.6 Medium

AI Score

Confidence

Low

4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:N/A:N

0.006 Low

EPSS

Percentile

77.2%

JSON

Puppet before 2.6.17 and 2.7.x before 2.7.18, and Puppet Enterprise before 2.5.2, allows remote authenticated users to read arbitrary files on the puppet master server by leveraging an arbitrary user’s certificate and private key in a GET request.

CPENameOperatorVersion
puppeteq2.6.0
puppeteq2.6.1
puppeteq2.6.2
puppeteq2.6.3
puppeteq2.6.4
puppeteq2.6.5
puppeteq2.6.6
puppeteq2.6.7
puppeteq2.6.8
puppeteq2.6.9
Rows per page:
1-10 of 351

Related

debiancve 1
cve 1
ubuntucve 1
suse 1
openvas 14
freebsd 2
nessus 9
debian 1
amazon 1
securityvulns 2
osv 1
ubuntu 1
fedora 3
debiancve
debiancve
CVE-2012-3864
2012-08-06 16:55:00
cve
cve
CVE-2012-3864
2012-08-06 16:55:00
ubuntucve
ubuntucve
CVE-2012-3864
2012-07-12 00:00:00
suse
suse
Security update for puppet (important)
2012-08-13 19:08:37
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2012:0983-1)
2021-06-09 00:00:00
Debian: Security Advisory (DSA-2511-1)
2012-08-10 00:00:00
FreeBSD Ports: puppet
2012-08-10 00:00:00
freebsd
freebsd
puppet -- multiple vulnerabilities
2012-07-10 00:00:00
puppet -- multiple vulnerabilities
2012-07-05 00:00:00
nessus
nessus
SuSE 11.1 Security Update : puppet (SAT Patch Number 6561)
2013-01-25 00:00:00
FreeBSD : puppet -- multiple vulnerabilities (101f0aae-52d1-11e2-87fe-f4ce46b9ace8)
2013-01-02 00:00:00
Fedora 16 : puppet-2.6.17-2.fc16 (2012-10897)
2012-07-30 00:00:00
debian
debian
[SECURITY] [DSA 2511-1] puppet security update
2012-07-12 18:55:52
amazon
amazon
Low: puppet
2012-10-15 12:29:00
securityvulns
securityvulns
[USN-1506-1] Puppet vulnerabilities
2012-07-16 00:00:00
Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
2012-07-16 00:00:00
osv
osv
puppet - several
2012-07-12 00:00:00
ubuntu
ubuntu
Puppet vulnerabilities
2012-07-12 00:00:00
fedora
fedora
[SECURITY] Fedora 17 Update: puppet-2.7.18-1.fc17
2012-07-28 01:20:31
[SECURITY] Fedora 16 Update: puppet-2.6.17-2.fc16
2012-07-28 01:17:34
[SECURITY] Fedora 17 Update: puppet-2.7.21-2.fc17
2013-03-30 21:31:30

6.6 Medium

AI Score

Confidence

Low

4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:N/A:N

0.006 Low

EPSS

Percentile

77.2%

JSON
Related for PRION:CVE-2012-3864
debiancve1cve1ubuntucve1suse1openvas14freebsd2nessus9debian1amazon1securityvulns2osv1ubuntu1fedora3