PT-2012-5049 · Puppet · Puppet+1

Kurt Seifried · Published 2012-08-06 · Updated 2019-07-10 · CVE-2012-3866

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Puppet versions 2.7.x before 2.7.18 Puppet Enterprise versions before 2.5.2

Description The issue allows local users to obtain sensitive configuration information by leveraging access to the puppet master server to read the last run report.yaml file. This is due to the lib/puppet/defaults.rb file using 0644 permissions for last run report.yaml.

Recommendations For Puppet versions 2.7.x before 2.7.18, update to version 2.7.18 or later. For Puppet Enterprise versions before 2.5.2, update to version 2.5.2 or later.

Exploit

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2012-3866

DSA-2511-1

GHSA-8JXJ-9R5F-W3M2

OPENSUSE-SU-2024:10581-1

Affected Products

Puppet

Puppet Enterprise

References · 15

• 🔥 https://github.com/puppetlabs/puppet/commit/fd44bf5e6d0d360f6a493d663b653c121fa83c3f · Exploit
• 🔥 https://github.com/rubysec/ruby-advisory-db/blob/master/gems/puppet/CVE-2012-3866.yml · Exploit
• http://debian.org/security/2012/dsa-2511 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2012-3866 · Security Note
• http://ubuntu.com/usn/USN-1506-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2012-3866 · Vendor Advisory
• http://puppetlabs.com/security/cve/cve-2012-3866 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2012-3866 · Vendor Advisory
• http://lists.opensuse.org/opensuse-updates/2012-07/msg00036.html · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-8jxj-9r5f-w3m2 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2012-3866 · Vendor Advisory
• https://github.com/puppetlabs/puppet · Note
• https://bugzilla.redhat.com/show_bug.cgi?id=839135 · Note
• http://secunia.com/advisories/50014 · Note
• https://puppet.com/security/cve/cve-2012-3866-lastrunreportyaml-world-readable · Note