medium5.5
CVE-2017-10689
In previous versions of Puppet Agent it was possible to install a module with world writable permissions.
Impact
In previous versions of Puppet Agent it was possible to install a module with world writable permissions. Puppet Agent 5.3.4 and 1.10.10 included a fix to this vulnerability.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Puppet | Puppet | before 5.3.4 from 1.10.0 before 1.10.10 |
| Puppet | Puppet Enterprise | before 2016.4.10 from 2017.1.0 before 2017.3.4 |
| Canonical | Ubuntu Linux | Version 14.04 |
| Redhat | Satellite | Version 6.4 |