CVE-2013-1655

Fixed in a distro release EPSS 5%

Puppet 2.7.x before 2.7.21 and 3.1.x before 3.1.1, when running Ruby 1.9.3 or later, allows remote attackers to execute arbitrary code via vectors related to "serialized attributes."

Published 2013-03-20 · CVE record · OSV

Products: puppet, puppet_enterprise, puppetlabs puppet

Fixed upstream

Distro releases