PT-2012-5049 · Puppet · Puppet+1

Kurt Seifried · Publicado 2012-08-06 · Atualizado 2019-07-10 · CVE-2012-3866

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Puppet versions 2.7.x before 2.7.18 Puppet Enterprise versions before 2.5.2

Description The issue allows local users to obtain sensitive configuration information by leveraging access to the puppet master server to read the last run report.yaml file. This is due to the lib/puppet/defaults.rb file using 0644 permissions for last run report.yaml.

Recommendations For Puppet versions 2.7.x before 2.7.18, update to version 2.7.18 or later. For Puppet Enterprise versions before 2.5.2, update to version 2.5.2 or later.

Exploit

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2012-3866

DSA-2511-1

GHSA-8JXJ-9R5F-W3M2

OPENSUSE-SU-2024:10581-1

Produtos afetados

Puppet

Puppet Enterprise

Referências · 15

• 🔥 https://github.com/puppetlabs/puppet/commit/fd44bf5e6d0d360f6a493d663b653c121fa83c3f · Exploit
• 🔥 https://github.com/rubysec/ruby-advisory-db/blob/master/gems/puppet/CVE-2012-3866.yml · Exploit
• https://github.com/puppetlabs/puppet · Nota
• http://debian.org/security/2012/dsa-2511 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2012-3866 · Nota de Segurança
• http://ubuntu.com/usn/USN-1506-1 · Aviso do Fabricante
• https://bugzilla.redhat.com/show_bug.cgi?id=839135 · Nota
• https://osv.dev/vulnerability/DEBIAN-CVE-2012-3866 · Aviso do Fabricante
• http://puppetlabs.com/security/cve/cve-2012-3866 · Aviso do Fabricante
• https://security-tracker.debian.org/tracker/CVE-2012-3866 · Aviso do Fabricante
• http://secunia.com/advisories/50014 · Nota
• http://lists.opensuse.org/opensuse-updates/2012-07/msg00036.html · Aviso do Fabricante
• https://osv.dev/vulnerability/GHSA-8jxj-9r5f-w3m2 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2012-3866 · Aviso do Fabricante
• https://puppet.com/security/cve/cve-2012-3866-lastrunreportyaml-world-readable · Nota