CVE-2012-3864

Опубликовано: 06 авг. 2012

Источник: nvd

CVSS2: 4

EPSS Низкий

Описание

Puppet before 2.6.17 and 2.7.x before 2.7.18, and Puppet Enterprise before 2.5.2, allows remote authenticated users to read arbitrary files on the puppet master server by leveraging an arbitrary user's certificate and private key in a GET request.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:puppet:puppet:2.6.0:*:*:*:*:*:*:*

cpe:2.3:a:puppet:puppet:2.6.1:*:*:*:*:*:*:*

cpe:2.3:a:puppet:puppet:2.6.2:*:*:*:*:*:*:*

cpe:2.3:a:puppet:puppet:2.6.3:*:*:*:*:*:*:*

cpe:2.3:a:puppet:puppet:2.6.4:*:*:*:*:*:*:*

cpe:2.3:a:puppet:puppet:2.6.5:*:*:*:*:*:*:*

cpe:2.3:a:puppet:puppet:2.6.6:*:*:*:*:*:*:*

cpe:2.3:a:puppet:puppet:2.6.7:*:*:*:*:*:*:*

cpe:2.3:a:puppet:puppet:2.6.8:*:*:*:*:*:*:*

cpe:2.3:a:puppet:puppet:2.6.9:*:*:*:*:*:*:*

cpe:2.3:a:puppet:puppet:2.6.10:*:*:*:*:*:*:*

cpe:2.3:a:puppet:puppet:2.6.11:*:*:*:*:*:*:*

cpe:2.3:a:puppet:puppet:2.6.12:*:*:*:*:*:*:*

cpe:2.3:a:puppet:puppet:2.6.13:*:*:*:*:*:*:*

cpe:2.3:a:puppet:puppet:2.6.14:*:*:*:*:*:*:*

cpe:2.3:a:puppet:puppet:2.6.15:*:*:*:*:*:*:*

cpe:2.3:a:puppet:puppet:2.7.2:*:*:*:*:*:*:*

cpe:2.3:a:puppet:puppet:2.7.3:*:*:*:*:*:*:*

cpe:2.3:a:puppet:puppet:2.7.4:*:*:*:*:*:*:*

cpe:2.3:a:puppet:puppet:2.7.5:*:*:*:*:*:*:*

cpe:2.3:a:puppet:puppet:2.7.6:*:*:*:*:*:*:*

cpe:2.3:a:puppet:puppet:2.7.7:*:*:*:*:*:*:*

cpe:2.3:a:puppet:puppet:2.7.8:*:*:*:*:*:*:*

cpe:2.3:a:puppet:puppet:2.7.9:*:*:*:*:*:*:*

cpe:2.3:a:puppet:puppet:2.7.10:*:*:*:*:*:*:*

cpe:2.3:a:puppet:puppet:2.7.11:*:*:*:*:*:*:*

cpe:2.3:a:puppet:puppet:2.7.12:*:*:*:*:*:*:*

cpe:2.3:a:puppet:puppet:2.7.13:*:*:*:*:*:*:*

cpe:2.3:a:puppet:puppet:2.7.14:*:*:*:*:*:*:*

cpe:2.3:a:puppet:puppet:2.7.16:*:*:*:*:*:*:*

cpe:2.3:a:puppet:puppet:2.7.17:*:*:*:*:*:*:*

cpe:2.3:a:puppetlabs:puppet:*:*:*:*:*:*:*:*

Версия до 2.6.16 (включая)

cpe:2.3:a:puppetlabs:puppet:2.7.0:*:*:*:*:*:*:*

cpe:2.3:a:puppetlabs:puppet:2.7.1:*:*:*:*:*:*:*

Конфигурация 2

cpe:2.3:a:puppet:puppet_enterprise:*:*:*:*:*:*:*:*

Версия до 2.5.1 (включая)

EPSS

Процентиль: 54%

0.00314

Низкий

4 Medium

CVSS2

Дефекты

CWE-200

Связанные уязвимости

CVE-2012-3864

ubuntu

больше 13 лет назад

CVE-2012-3864

redhat

больше 13 лет назад

CVE-2012-3864

debian

больше 13 лет назад

Puppet before 2.6.17 and 2.7.x before 2.7.18, and Puppet Enterprise be ...

GHSA-8xhg-x93x-j983

github

больше 3 лет назад

EPSS

Процентиль: 54%

0.00314

Низкий

4 Medium

CVSS2

Дефекты

CWE-200