critical9.8
CVE-2016-2788
MCollective 2.7.0 and 2.8.x before 2.8.9, as used in Puppet Enterprise, allows remote attackers to execute arbitrary code via vectors related to the mco ping c…
Impact
MCollective 2.7.0 and 2.8.x before 2.8.9, as used in Puppet Enterprise, allows remote attackers to execute arbitrary code via vectors related to the mco ping command.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Puppet | Marionette Collective | Versions 2.7.0, 2.8.0, 2.8.1, 2.8.2, 2.8.3, 2.8.4 |
| Puppet | Puppet Enterprise | from 3.8.0 before 3.8.6 from 2016.2.0 before 2016.2.1 |