Remote code execution

2017-08-0914:29:00

PRIOn knowledge base

www.prio-n.com

8.1 High

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

72.8%

JSON

The console in Puppet Enterprise 2015.x and 2016.x prior to 2016.4.0 includes unsafe string reads that potentially allows for remote code execution on the console node.

CPENameOperatorVersion
puppet_enterpriseeq2015.2.0
puppet_enterpriseeq2015.2.1
puppet_enterpriseeq2015.2.2
puppet_enterpriseeq2015.2.3
puppet_enterpriseeq2015.3.0
puppet_enterpriseeq2015.3.1
puppet_enterpriseeq2015.3.2
puppet_enterpriseeq2015.3.3
puppet_enterpriseeq2016.1.1
puppet_enterpriseeq2016.1.2

Name	Operator	Version
puppet_enterprise	eq	2015.2.0
puppet_enterprise	eq	2015.2.1
puppet_enterprise	eq	2015.2.2
puppet_enterprise	eq	2015.2.3
puppet_enterprise	eq	2015.3.0
puppet_enterprise	eq	2015.3.1
puppet_enterprise	eq	2015.3.2
puppet_enterprise	eq	2015.3.3
puppet_enterprise	eq	2016.1.1
puppet_enterprise	eq	2016.1.2