PT-2012-1141 · Puppet+1 · Puppet Enterprise+2

Published 2012-05-29 · Updated 2025-11-20 · CVE-2012-1986

Positive Technologies (AI Summary)

CVSS v2.0

6.0

Medium

Base vector

AV:N/AC:M/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Puppet versions 2.6.x through 2.6.14 Puppet versions 2.7.x through 2.7.12 Puppet Enterprise (PE) Users versions 1.0 through 2.5.0

Description The issue allows remote authenticated users with an authorized SSL key and certain permissions on the puppet master to read arbitrary files via a symlink attack in conjunction with a crafted REST request for a file in a filebucket. This can lead to a breach of confidentiality, integrity, and availability of protected information. The exploitation can be carried out remotely by an attacker who has passed the authentication procedure.

Recommendations For Puppet versions 2.6.x through 2.6.14, update to version 2.6.15 or later. For Puppet versions 2.7.x through 2.7.12, update to version 2.7.13 or later. For Puppet Enterprise (PE) Users versions 1.0 through 2.5.0, update to version 2.5.1 or later.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

BDU:2015-09668

CVE-2012-1986

DSA-2451-1

SUSE-SU-2012_0771-1

Affected Products

Puppet

Puppet Enterprise

Suse

References · 40

• http://secunia.com/advisories/48748 · Vendor Advisory
• http://ubuntu.com/usn/usn-1419-1 · Vendor Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2012-May/080003.html · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1989 · Security Note
• http://secunia.com/advisories/48789 · Vendor Advisory
• http://secunia.com/advisories/49136 · Vendor Advisory
• https://hermes.opensuse.org/messages/14523305 · Vendor Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2012-April/079227.html · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1986 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2012-1986 · Security Note
• https://osv.dev/vulnerability/CVE-2012-1986 · Vendor Advisory
• http://debian.org/security/2012/dsa-2451 · Vendor Advisory
• https://hermes.opensuse.org/messages/15087408 · Vendor Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2012-April/079289.html · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1987 · Security Note