critical9.8
CVE-2018-6512
The previous version of Puppet Enterprise 2018.1 is vulnerable to unsafe code execution when upgrading pe-razor-server.
Impact
The previous version of Puppet Enterprise 2018.1 is vulnerable to unsafe code execution when upgrading pe-razor-server. Affected releases are Puppet Enterprise: 2018.1.x versions prior to 2018.1.1 and razor-server and pe-razor-server prior to 1.9.0.0.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Puppet | Pe-Razor-Server | before 1.9.0.0 |
| Puppet | Puppet Enterprise | from 2018.1.0 before 2018.1.1 |
| Puppet | Razor-Server | before 1.9.0.0 |