CVE-2011-0528 | BDVDB-2026-59967 Detail

Description#

Puppet 2.6.0 through 2.6.3 does not properly restrict access to node resources, which allows remote authenticated Puppet nodes to read or modify the resources of other nodes via unspecified vectors.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.ubuntu.com/usn/USN-1365-1
http://www.openwall.com/lists/oss-security/2011/01/27/6
http://www.mail-archive.com/puppet-users%40googlegroups.com/msg16429.html
http://www.openwall.com/lists/oss-security/2011/01/31/5

Exploit#

No public exploit known

History#

Version 12014-02-17Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.