NetSight
IP …
medium4.0

CVE-2013-2275

The default configuration for puppet masters 0.25.0 and later in Puppet before 2.6.18, 2.7.x before 2.7.21, and 3.1.x before 3.1.1, and Puppet Enterprise befor…

Impact

The default configuration for puppet masters 0.25.0 and later in Puppet before 2.6.18, 2.7.x before 2.7.21, and 3.1.x before 3.1.1, and Puppet Enterprise before 1.2.7 and 2.7.x before 2.7.2, allows remote authenticated nodes to submit reports for other nodes via unspecified vectors.

Affected products

VendorProductAffected versions
PuppetPuppet
Versions 2.6.0, 2.6.1, 2.6.2, 2.6.3, 2.6.4, 2.6.5
PuppetlabsPuppet
through 2.6.17
through 1.2.6
Versions 2.7.0, 2.7.1, 2.7.19, 2.7.20
PuppetPuppet Enterprise
Versions 3.1.0, 2.7.0, 2.7.1
CanonicalUbuntu Linux
Versions 11.10, 12.04, 12.10

References