Privilege escalation

2018-06-1120:29:00

PRIOn knowledge base

www.prio-n.com

7.5 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

27.2%

JSON

In Puppet Agent 1.10.x prior to 1.10.13, Puppet Agent 5.3.x prior to 5.3.7, Puppet Agent 5.5.x prior to 5.5.2, Facter on Windows is vulnerable to a DLL preloading attack, which could lead to a privilege escalation.

CPENameOperatorVersion
puppetge1.10.0
puppetlt1.10.13
puppetge5.3.0
puppetlt5.3.7
puppetge5.5.0
puppetlt5.5.2

Name	Operator	Version
puppet	ge	1.10.0
puppet	lt	1.10.13
puppet	ge	5.3.0
puppet	lt	5.3.7
puppet	ge	5.5.0
puppet	lt	5.5.2

References

puppet.com/security/cve/CVE-2018-6514