CVEvulnerability

CVE-2018-6513

8.8 HIGH Published 2018-06-11 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2018-06-11
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
8.8 HIGH — CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
6.5 MEDIUM — AV:N/AC:L/Au:S/C:P/I:P/A:P
Weaknesses
CWE-426

Description

Puppet Enterprise 2016.4.x prior to 2016.4.12, Puppet Enterprise 2017.3.x prior to 2017.3.7, Puppet Enterprise 2018.1.x prior to 2018.1.1, Puppet Agent 1.10.x prior to 1.10.13, Puppet Agent 5.3.x prior to 5.3.7, and Puppet Agent 5.5.x prior to 5.5.2, were vulnerable to an attack where an unprivileged user on Windows agents could write custom facts that can escalate privileges on the next puppet run. This was possible through the loading of shared libraries from untrusted paths.

Affected configurations

• puppet puppet (>= 1.10.0 < 1.10.13) • puppet puppet (>= 5.3.0 < 5.3.7) • puppet puppet (>= 5.5.0 < 5.5.2) • puppet puppet enterprise (>= 2016.4.0 < 2016.4.12) • puppet puppet enterprise (>= 2017.3.0 < 2017.3.7) • puppet puppet enterprise (>= 2018.1.0 < 2018.1.1)

Related

Weakness · CWE (1)

  • CWE-426 Untrusted Search Path weakness

References