CVE Vulnerabilities

CVE-2013-2275

Published: Mar 20, 2013 | Modified: Nov 21, 2024
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
4 MEDIUM
AV:N/AC:L/Au:S/C:N/I:P/A:N
RedHat/V2
4 MODERATE
AV:N/AC:L/Au:S/C:N/I:P/A:N
RedHat/V3
Ubuntu
MEDIUM

The default configuration for puppet masters 0.25.0 and later in Puppet before 2.6.18, 2.7.x before 2.7.21, and 3.1.x before 3.1.1, and Puppet Enterprise before 1.2.7 and 2.7.x before 2.7.2, allows remote authenticated nodes to submit reports for other nodes via unspecified vectors.

Affected Software

Name Vendor Start Version End Version
Puppet Puppet 2.6.0 (including) 2.6.0 (including)
Puppet Puppet 2.6.1 (including) 2.6.1 (including)
Puppet Puppet 2.6.2 (including) 2.6.2 (including)
Puppet Puppet 2.6.3 (including) 2.6.3 (including)
Puppet Puppet 2.6.4 (including) 2.6.4 (including)
Puppet Puppet 2.6.5 (including) 2.6.5 (including)
Puppet Puppet 2.6.6 (including) 2.6.6 (including)
Puppet Puppet 2.6.7 (including) 2.6.7 (including)
Puppet Puppet 2.6.8 (including) 2.6.8 (including)
Puppet Puppet 2.6.9 (including) 2.6.9 (including)
Puppet Puppet 2.6.10 (including) 2.6.10 (including)
Puppet Puppet 2.6.11 (including) 2.6.11 (including)
Puppet Puppet 2.6.12 (including) 2.6.12 (including)
Puppet Puppet 2.6.13 (including) 2.6.13 (including)
Puppet Puppet 2.6.14 (including) 2.6.14 (including)
Puppet Puppet 2.6.15 (including) 2.6.15 (including)
Puppet Puppet 2.6.16 (including) 2.6.16 (including)
Puppet Puppetlabs * 2.6.17 (including)
Puppet Ubuntu devel *
Puppet Ubuntu hardy *
Puppet Ubuntu lucid *
Puppet Ubuntu oneiric *
Puppet Ubuntu precise *
Puppet Ubuntu quantal *
Puppet Ubuntu upstream *
OpenStack Folsom for RHEL 6 RedHat puppet-0:2.6.18-1.el6ost *

References