CVE-2017-2290: Incorrect Permission Assignment for Critical Resource

On Windows installations of the mcollective-puppet-agent plugin, version 1.12.0, a non-administrator user can create an executable that will be executed with administrator privileges on the next "mco puppet" run. Puppet Enterprise users are not affected. This is resolved in mcollective-puppet-age...

PT-2017-15330

Name of the Vulnerable Software and Affected Versions mcollective-puppet-agent version 1.12.0 Description A security issue allows a non-administrator user to create an executable that will be executed with administrator privileges on the next "mco puppet" run. This issue does not affect Puppet...