PT-2018-7107

Name of the Vulnerable Software and Affected Versions: Puppet Enterprise versions prior to 2016.4.5 Puppet Enterprise versions prior to 2017.2.1 Description: The issue concerns a configuration in MCollective that allows the package plugin to install or remove arbitrary packages on all managed...