CVE-2017-2290

On Windows installations of the mcollective-puppet-agent plugin (version 1.12.0), a non-administrator can place an executable that will run with administrator privileges on the next mco puppet run. Puppet Enterprise users are not affected. The issue is resolved in mcollective-puppet-agent 1.12.1....