CVE-2013-4966 | BDVDB-2026-60243 Detail

Description#

The master external node classification script in Puppet Enterprise before 3.2.0 does not verify the identity of consoles, which allows remote attackers to create arbitrary classifications on the master by spoofing a console.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.securitytracker.com/id/1029873
http://puppetlabs.com/security/cve/cve-2013-4966

Exploit#

No public exploit known

History#

Version 12014-03-07Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.