CVE-2012-3864

Fixed in a distro release EPSS 2%

Puppet before 2.6.17 and 2.7.x before 2.7.18, and Puppet Enterprise before 2.5.2, allows remote authenticated users to read arbitrary files on the puppet master server by leveraging an arbitrary user's certificate and private key in a GET request.

Published 2012-08-06 · CVE record · OSV

Products: puppet, puppetlabs puppet, puppet_enterprise

Distro releases