lib/puppet/defaults.rb in Puppet 2.7.x before 2.7.18, and Puppet Enterprise before 2.5.2, uses 0644 permissions for last_run_report.yaml, which allows local users to obtain sensitive configuration information by leveraging access to the puppet master server to read this file.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Puppet | Puppet | 2.7.2 (including) | 2.7.2 (including) |
| Puppet | Puppet | 2.7.3 (including) | 2.7.3 (including) |
| Puppet | Puppet | 2.7.4 (including) | 2.7.4 (including) |
| Puppet | Puppet | 2.7.5 (including) | 2.7.5 (including) |
| Puppet | Puppet | 2.7.6 (including) | 2.7.6 (including) |
| Puppet | Puppet | 2.7.8 (including) | 2.7.8 (including) |
| Puppet | Puppet | 2.7.9 (including) | 2.7.9 (including) |
| Puppet | Puppet | 2.7.10 (including) | 2.7.10 (including) |
| Puppet | Puppet | 2.7.11 (including) | 2.7.11 (including) |
| Puppet | Puppet | 2.7.12 (including) | 2.7.12 (including) |
| Puppet | Puppet | 2.7.13 (including) | 2.7.13 (including) |
| Puppet | Puppet | 2.7.14 (including) | 2.7.14 (including) |
| Puppet | Puppet | 2.7.16 (including) | 2.7.16 (including) |
| Puppet | Puppetlabs | * | 2.7.17 (including) |
| Puppet | Puppetlabs | 2.7.0 (including) | 2.7.0 (including) |
| Puppet | Puppetlabs | 2.7.1 (including) | 2.7.1 (including) |
| Puppet | Ubuntu | devel | * |
| Puppet | Ubuntu | hardy | * |
| Puppet | Ubuntu | oneiric | * |
| Puppet | Ubuntu | precise | * |
| Puppet | Ubuntu | upstream | * |