CVE-2017-10690

In previous versions of Puppet Agent it was possible for the agent to retrieve facts from an environment that it was not classified to retrieve from. This was resolved in Puppet Agent 5.3.4, included in Puppet Enterprise 2017.3.4
References
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:puppet:puppet:*:*:*:*:*:*:*:*
cpe:2.3:a:puppet:puppet_enterprise:*:*:*:*:*:*:*:*

Configuration 2 (hide)

cpe:2.3:a:redhat:satellite:6.4:*:*:*:*:*:*:*

History

No history.

Information

Published : 2018-02-09 20:29

Updated : 2024-02-28 16:25


NVD link : CVE-2017-10690

Mitre link : CVE-2017-10690

CVE.ORG link : CVE-2017-10690


JSON object : View

Products Affected

puppet

  • puppet_enterprise
  • puppet

redhat

  • satellite
CWE
CWE-269

Improper Privilege Management