GitHub Advisoryadvisory · RubyGems
GHSA-g89m-3wjw-h857 Puppet vulnerable to Path Traversal
LOW
Official page ↗
- Aliases
- CVE-2012-3865
- Ecosystem
- RubyGems
- Packages
- puppet
- Severity
- Low
- Weaknesses
- CWE-22
- Reviewed
- 2020-06-16
Affected packages
• RubyGems puppet: < 2.6.17 → fixed in 2.6.17
• RubyGems puppet: >= 2.7.0, < 2.7.18 → fixed in 2.7.18
Description
Directory traversal vulnerability in `lib/puppet/reports/store.rb` in Puppet before 2.6.17 and 2.7.x before 2.7.18, and Puppet Enterprise before 2.5.2, when Delete is enabled in auth.conf, allows remote authenticated users to delete arbitrary files on the puppet master server via a `..` (dot dot) in a node name.
Related
Alias · CVE (1)
- CVE-2012-3865 Directory traversal vulnerability in lib/puppet/reports/store.rb in Puppet before 2.6.17 and 2.7.x before 2.7.18, and Puppet Enterprise… vulnerability
Weakness · CWE (1)
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory weakness
References
- https://nvd.nist.gov/vuln/detail/CVE-2012-3865 advisory
- https://github.com/puppetlabs/puppet/commit/554eefc55f57ed2b76e5ee04d8f194d36f6ee67f web
- https://github.com/puppetlabs/puppet/commit/d80478208d79a3e6d6cb1fbc525e24817fe8c4c6 web
- https://bugzilla.redhat.com/show_bug.cgi?id=839131 web
- https://github.com/puppetlabs/puppet package
- https://github.com/rubysec/ruby-advisory-db/blob/master/gems/CVE-2012-3865.yml web
- https://github.com/rubysec/ruby-advisory-db/blob/master/gems/puppet/CVE-2012-3865.yml web
- https://www.puppet.com/security/cve/overview-cve-2012-3865-arbitrary-file-delete/dos-puppet-master web
- http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00006.html web
- http://lists.opensuse.org/opensuse-updates/2012-07/msg00036.html web
- http://puppetlabs.com/security/cve/cve-2012-3865 web
- http://www.debian.org/security/2012/dsa-2511 web
- http://www.ubuntu.com/usn/USN-1506-1 web