Lucene search
PRIOn knowledge basePRION:CVE-2017-2293HistoryFeb 01, 2018 - 10:29 p.m.
Default configuration
2018-02-0122:29:00
PRIOn knowledge base
www.prio-n.com
5
Versions of Puppet Enterprise prior to 2016.4.5 or 2017.2.1 shipped with an MCollective configuration that allowed the package plugin to install or remove arbitrary packages on all managed agents. This release adds default configuration to not allow these actions. Customers who rely on this functionality can change this policy.
| CPE | Name | Operator | Version |
|---|---|---|---|
| puppet_enterprise | eq | 2016.5.1 | |
| puppet_enterprise | lt | 2016.4.5 | |
| puppet_enterprise | eq | 2016.5.2 | |
| puppet_enterprise | eq | 2017.1.1 | |
| puppet_enterprise | eq | 2017.1.0 |
References
Related
cvelist
cvelist
CVE-2017-2293
2018-02-01 00:00:00
cve
cve
CVE-2017-2293
2018-02-01 22:29:00
nvd
nvd
CVE-2017-2293
2018-02-01 22:29:00
debiancve
debiancve
CVE-2017-2293
2018-02-01 22:29:00
openvas
openvas
Puppet Enterprise < 2016.4.4 / 2017 < 2017.2.1 Multiple Vulnerabilities
2018-02-02 00:00:00
Puppet Enterprise < 2016.4.5, 2016.5.x < 2017.2.1 Multiple Vulnerabilities
2017-07-06 00:00:00
nessus
nessus
Puppet Enterprise < 2016.4.5 / 2016.5.x / 2017.1.x Multiple Vulnerabilities
2019-10-09 00:00:00