PT-2012-5049

Name of the Vulnerable Software and Affected Versions Puppet versions 2.7.x before 2.7.18 Puppet Enterprise versions before 2.5.2 Description The issue allows local users to obtain sensitive configuration information by leveraging access to the puppet master server to read the last run report.yam...