Описание
Puppet Module Tool (PMT), as used in Puppet 2.7.x before 2.7.23 and 3.2.x before 3.2.4, and Puppet Enterprise 2.8.x before 2.8.3 and 3.0.x before 3.0.1, installs modules with weak permissions if those permissions were used when the modules were originally built, which might allow local users to read or modify those modules depending on the original permissions.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| CloudForms Management Engine 5 | puppet | Not affected | ||
| Red Hat Enterprise MRG 1 | puppet | Not affected | ||
| Red Hat Subscription Asset Manager | puppet | Not affected | ||
| OpenStack 3 for RHEL 6 | facter | Fixed | RHSA-2013:1283 | 24.09.2013 |
| OpenStack 3 for RHEL 6 | hiera | Fixed | RHSA-2013:1283 | 24.09.2013 |
| OpenStack 3 for RHEL 6 | puppet | Fixed | RHSA-2013:1283 | 24.09.2013 |
| OpenStack 3 for RHEL 6 | ruby-augeas | Fixed | RHSA-2013:1283 | 24.09.2013 |
| OpenStack 3 for RHEL 6 | ruby-shadow | Fixed | RHSA-2013:1283 | 24.09.2013 |
| OpenStack 3 for RHEL 6 | ruby193-puppet | Fixed | RHSA-2013:1284 | 24.09.2013 |
Показывать по
Дополнительная информация
Статус:
EPSS
3.7 Low
CVSS2
Связанные уязвимости
Puppet Module Tool (PMT), as used in Puppet 2.7.x before 2.7.23 and 3.2.x before 3.2.4, and Puppet Enterprise 2.8.x before 2.8.3 and 3.0.x before 3.0.1, installs modules with weak permissions if those permissions were used when the modules were originally built, which might allow local users to read or modify those modules depending on the original permissions.
Puppet Module Tool (PMT), as used in Puppet 2.7.x before 2.7.23 and 3.2.x before 3.2.4, and Puppet Enterprise 2.8.x before 2.8.3 and 3.0.x before 3.0.1, installs modules with weak permissions if those permissions were used when the modules were originally built, which might allow local users to read or modify those modules depending on the original permissions.
Puppet Module Tool (PMT), as used in Puppet 2.7.x before 2.7.23 and 3. ...
Puppet Module Tool (PMT), as used in Puppet 2.7.x before 2.7.23 and 3.2.x before 3.2.4, and Puppet Enterprise 2.8.x before 2.8.3 and 3.0.x before 3.0.1, installs modules with weak permissions if those permissions were used when the modules were originally built, which might allow local users to read or modify those modules depending on the original permissions.
Уязвимости операционной системы Gentoo Linux, позволяющие удаленному злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации
EPSS
3.7 Low
CVSS2