PT-2017-8751 · Puppet · Puppet Enterprise

Publicado 2017-08-09 · Atualizado 2019-07-10 · CVE-2016-5716

Positive Technologies (AI Summary)

CVSS v3.1

8.8

Alta

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Puppet Enterprise versions 2015.x through 2016.3.x

Description The issue concerns unsafe string reads in the console of Puppet Enterprise, potentially allowing for remote code execution on the console node.

Recommendations For Puppet Enterprise versions 2015.x through 2016.3.x, update to version 2016.4.0 or later to resolve the issue.

Correção

RCE

Use of Externally-Controlled Format String

Enumeração de Fraquezas

CWE-134

Identificadores relacionados

CVE-2016-5716

Produtos afetados

Puppet Enterprise

Referências · 3

• https://osv.dev/vulnerability/CVE-2016-5716 · Aviso do Fabricante
• https://puppet.com/security/cve/pe-console-oct-2016 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2016-5716 · Nota de Segurança