EUVD-2018-18272

Malware in sbrugna...

CVE-2018-6516

On Windows only, with a specifically crafted configuration file an attacker could get Puppet PE client tools aka pe-client-tools 16.4.x prior to 16.4.6, 17.3.x prior to 17.3.6, and 18.1.x prior to 18.1.2 to load arbitrary code with privilege escalation...

Privilege escalation

On Windows only, with a specifically crafted configuration file an attacker could get Puppet PE client tools aka pe-client-tools 16.4.x prior to 16.4.6, 17.3.x prior to 17.3.6, and 18.1.x prior to 18.1.2 to load arbitrary code with privilege escalation...

CVE-2018-6516

On Windows only, with a specifically crafted configuration file an attacker could get Puppet PE client tools aka pe-client-tools 16.4.x prior to 16.4.6, 17.3.x prior to 17.3.6, and 18.1.x prior to 18.1.2 to load arbitrary code with privilege escalation...

CVE-2018-6516

CVE-2018-6516 affects Puppet Enterprise client tools on Windows. A specially crafted configuration file could cause the PE client tools (pe-client-tools) 16.4.x before 16.4.6, 17.3.x before 17.3.6, and 18.1.x before 18.1.2 to load arbitrary code with privilege escalation. Connected sources confir...

CVE-2018-6516

On Windows only, with a specifically crafted configuration file an attacker could get Puppet PE client tools aka pe-client-tools 16.4.x prior to 16.4.6, 17.3.x prior to 17.3.6, and 18.1.x prior to 18.1.2 to load arbitrary code with privilege escalation...

CVE-2018-6516

Removed by vendor...

CVE-2018-6516: Undefined Security Weakness

On Windows only, with a specifically crafted configuration file an attacker could get Puppet PE client tools aka pe-client-tools 16.4.x prior to 16.4.6, 17.3.x prior to 17.3.6, and 18.1.x prior to 18.1.2 to load arbitrary code with privilege escalation...

PT-2018-17605

Name of the Vulnerable Software and Affected Versions Puppet PE client tools versions 16.4.x through 16.4.5 Puppet PE client tools versions 17.3.x through 17.3.5 Puppet PE client tools versions 18.1.x through 18.1.1 Description The issue allows an attacker to load arbitrary code with privilege...