CVE-2013-2275

Fixed in a distro release EPSS 3%

The default configuration for puppet masters 0.25.0 and later in Puppet before 2.6.18, 2.7.x before 2.7.21, and 3.1.x before 3.1.1, and Puppet Enterprise before 1.2.7 and 2.7.x before 2.7.2, allows remote authenticated nodes to submit reports for other nodes via unspecified vectors.

Published 2013-03-20 · CVE record · OSV

Products: puppet, puppetlabs puppet, puppet_enterprise, canonical ubuntu_linux

Distro releases