CVE-2016-2788: Improper Access Control

MCollective 2.7.0 and 2.8.x before 2.8.9, as used in Puppet Enterprise, allows remote attackers to execute arbitrary code via vectors related to the mco ping command...

PT-2017-8261

Name of the Vulnerable Software and Affected Versions MCollective versions 2.7.0 through 2.8.8 MCollective version 2.8.x before 2.8.9 Description The issue allows remote attackers to execute arbitrary code via vectors related to the mco ping command. Recommendations For MCollective versions 2.7.0...