CVE-2012-3864

Опубликовано: 10 июл. 2012

Источник: redhat

CVSS2: 2.1

Описание

Puppet before 2.6.17 and 2.7.x before 2.7.18, and Puppet Enterprise before 2.5.2, allows remote authenticated users to read arbitrary files on the puppet master server by leveraging an arbitrary user's certificate and private key in a GET request.

Затронутые пакеты

Платформа	Пакет	Состояние	Рекомендация	Релиз
Red Hat CloudForms Tools 1	puppet	Affected
Red Hat Enterprise MRG 1	puppet	Will not fix
CloudForms for RHEL 6	converge-ui-devel	Fixed	RHSA-2012:1542	04.12.2012
CloudForms for RHEL 6	puppet	Fixed	RHSA-2012:1542	04.12.2012
CloudForms for RHEL 6	rubygem-actionpack	Fixed	RHSA-2012:1542	04.12.2012
CloudForms for RHEL 6	rubygem-activerecord	Fixed	RHSA-2012:1542	04.12.2012
CloudForms for RHEL 6	rubygem-activesupport	Fixed	RHSA-2012:1542	04.12.2012
CloudForms for RHEL 6	rubygem-chunky_png	Fixed	RHSA-2012:1542	04.12.2012
CloudForms for RHEL 6	rubygem-compass	Fixed	RHSA-2012:1542	04.12.2012
CloudForms for RHEL 6	rubygem-compass-960-plugin	Fixed	RHSA-2012:1542	04.12.2012

Показывать по

Ссылки на источники

Дополнительная информация

Статус:

Low

https://bugzilla.redhat.com/show_bug.cgi?id=839130puppet: authenticated clients allowed to read arbitrary files from the puppet master

2.1 Low

CVSS2

Связанные уязвимости

CVE-2012-3864

ubuntu

больше 13 лет назад

CVE-2012-3864

nvd

больше 13 лет назад

CVE-2012-3864

debian

больше 13 лет назад

Puppet before 2.6.17 and 2.7.x before 2.7.18, and Puppet Enterprise be ...

GHSA-8xhg-x93x-j983

github

больше 3 лет назад

2.1 Low

CVSS2