CVEvulnerability

CVE-2013-4761

5.1 MEDIUM Published 2013-08-20 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2013-08-20
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
5.1 MEDIUM — AV:N/AC:H/Au:N/C:P/I:P/A:P

Description

Unspecified vulnerability in Puppet 2.7.x before 2.7.23 and 3.2.x before 3.2.4, and Puppet Enterprise 2.8.x before 2.8.3 and 3.0.x before 3.0.1, allows remote attackers to execute arbitrary Ruby programs from the master via the resource_type service. NOTE: this vulnerability can only be exploited utilizing unspecified "local file system access" to the Puppet Master.

Affected configurations

• puppet puppet 3.2.1 • puppet puppet 3.2.2 • puppet puppet 3.2.3 • puppetlabs puppet 3.2.0 • puppet puppet 2.7.2 • puppetlabs puppet 2.7.0 • puppetlabs puppet 2.7.1 • puppet puppet enterprise 2.8.0 • puppet puppet enterprise 2.8.1 • puppet puppet enterprise 2.8.2 • puppet puppet enterprise 3.0.0

References