CVE-2011-0528

Опубликовано: 17 фев. 2014

Источник: nvd

CVSS2: 5.5

EPSS Низкий

Описание

Puppet 2.6.0 through 2.6.3 does not properly restrict access to node resources, which allows remote authenticated Puppet nodes to read or modify the resources of other nodes via unspecified vectors.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:puppet:puppet:2.6.0:*:*:*:*:*:*:*

cpe:2.3:a:puppet:puppet:2.6.1:*:*:*:*:*:*:*

cpe:2.3:a:puppet:puppet:2.6.2:*:*:*:*:*:*:*

cpe:2.3:a:puppet:puppet:2.6.3:*:*:*:*:*:*:*

EPSS

Процентиль: 74%

0.01652

Низкий

5.5 Medium

CVSS2

Дефекты

CWE-264

Связанные уязвимости

CVE-2011-0528

ubuntu

больше 12 лет назад

Puppet 2.6.0 through 2.6.3 does not properly restrict access to node resources, which allows remote authenticated Puppet nodes to read or modify the resources of other nodes via unspecified vectors.

CVE-2011-0528

debian

больше 12 лет назад

Puppet 2.6.0 through 2.6.3 does not properly restrict access to node r ...

GHSA-9pvx-fwwh-w289

github

больше 4 лет назад

Puppet does not properly restrict access to node resources

EPSS

Процентиль: 74%

0.01652

Низкий

5.5 Medium

CVSS2

Дефекты

CWE-264