| Vulnerability Name: | CVE-2013-2274 (CCN-82751) | ||||||||||||||||||||
| Assigned: | 2013-03-12 | ||||||||||||||||||||
| Published: | 2013-03-12 | ||||||||||||||||||||
| Updated: | 2019-07-10 | ||||||||||||||||||||
| Summary: | Puppet 2.6.x before 2.6.18 and Puppet Enterprise 1.2.x before 1.2.7 allows remote authenticated users to execute arbitrary code on the puppet master, or an agent with puppet kick enabled, via a crafted request for a report. | ||||||||||||||||||||
| CVSS v3 Severity: | 5.5 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L)
| ||||||||||||||||||||
| CVSS v2 Severity: | 6.5 Medium (CVSS v2 Vector: AV:N/AC:L/Au:S/C:P/I:P/A:P) 4.8 Medium (Temporal CVSS v2 Vector: AV:N/AC:L/Au:S/C:P/I:P/A:P/E:U/RL:OF/RC:C)
4.8 Medium (CCN Temporal CVSS v2 Vector: AV:N/AC:L/Au:S/C:P/I:P/A:P/E:U/RL:OF/RC:C)
| ||||||||||||||||||||
| Vulnerability Type: | CWE-noinfo | ||||||||||||||||||||
| Vulnerability Consequences: | Gain Privileges | ||||||||||||||||||||
| References: | Source: MITRE Type: CNA CVE-2013-2274 Source: SUSE Type: UNKNOWN SUSE-SU-2013:0618 Source: SUSE Type: UNKNOWN openSUSE-SU-2013:0641 Source: REDHAT Type: UNKNOWN RHSA-2013:0710 Source: CCN Type: SA52596 Puppet Multiple Vulnerabilities Source: SECUNIA Type: Vendor Advisory 52596 Source: DEBIAN Type: UNKNOWN DSA-2643 Source: DEBIAN Type: DSA-2643 puppet -- several vulnerabilities Source: BID Type: UNKNOWN 58447 Source: CCN Type: BID-58447 Puppet CVE-2013-2274 Remote Code Execution Vulnerability Source: XF Type: UNKNOWN puppet-httpput-code-exec(82751) Source: CCN Type: Puppet Labs Web Site Security Updates: New Releases of Puppet and Puppet Enterprise Source: CONFIRM Type: Vendor Advisory https://puppetlabs.com/security/cve/cve-2013-2274/ | ||||||||||||||||||||
| Vulnerable Configuration: | Configuration 1: Configuration 2: Configuration CCN 1:  Denotes that component is vulnerable | ||||||||||||||||||||
| Oval Definitions | |||||||||||||||||||||
| |||||||||||||||||||||
| BACK | |||||||||||||||||||||