Unscored severity · published May 29, 2012
CVE-2012-1986
Puppet 2.6.x before 2.6.15 and 2.7.x before 2.7.13, and Puppet Enterprise (PE) Users 1.0, 1.1, 1.2.x, 2.0.x, and 2.5.x before 2.5.1 allows remote authenticated users with an…
–
CVSS
1.5%
EPSS
No
On KEV
Description
Puppet 2.6.x before 2.6.15 and 2.7.x before 2.7.13, and Puppet Enterprise (PE) Users 1.0, 1.1, 1.2.x, 2.0.x, and 2.5.x before 2.5.1 allows remote authenticated users with an authorized SSL key and certain permissions on the puppet master to read arbitrary files via a symlink attack in conjunction with a crafted REST request for a file in a filebucket.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.5% · higher than 73% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
PU
Puppet · Puppet
2.6.0; 2.6.1; 2.6.2; 2.6.3; 2.6.4; 2.6.5; +19 more · source: NVD
PE
Puppet Enterprise · Puppet
2.5.0; 1.2.0; 1.2.1; 1.2.2; 1.2.3; 1.2.4; +3 more · source: NVD
PE
Puppet Enterprise Users · Puppetlabs
1.0; 1.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2012-1986
CVE.org
https://www.cve.org/CVERecord?id=CVE-2012-1986
lists.fedoraproject.org
http://lists.fedoraproject.org/pipermail/package-announce/2012-April/079227.html
lists.fedoraproject.org
http://lists.fedoraproject.org/pipermail/package-announce/2012-April/079289.html
lists.fedoraproject.org
http://lists.fedoraproject.org/pipermail/package-announce/2012-May/080003.html
projects.puppetlabs.com
http://projects.puppetlabs.com/issues/13511
projects.puppetlabs.com
http://projects.puppetlabs.com/projects/1/wiki/Release_Notes#2.6.15
Vendor Advisory
http://puppetlabs.com/security/cve/cve-2012-1986/
More from Puppet
9.8
CVE-2016-2785
Puppet Server before 2.3.2 and Ruby puppetmaster in Puppet 4.x before 4.4.2 and in Puppet Agent before 1.4.2 might allow remote attackers to bypass intended auth.conf access…
8.8
CVE-2021-27021
A flaw was discovered in Puppet DB, this flaw results in an escalation of privileges which allows the user to delete tables via an SQL query
8.8
CVE-2018-6513
Puppet Enterprise 2016.4.x prior to 2016.4.12, Puppet Enterprise 2017.3.x prior to 2017.3.7, Puppet Enterprise 2018.1.x prior to 2018.1.1, Puppet Agent 1.10.x prior to 1.10.13,…
8.2
CVE-2017-2295
Versions of Puppet prior to 4.10.1 will deserialize data off the wire (from the agent to the server, in this case) with a attacker-specified format
7.8
CVE-2018-6515
Puppet Agent 1.10.x prior to 1.10.13, Puppet Agent 5.3.x prior to 5.3.7, and Puppet Agent 5.5.x prior to 5.5.2 on Windows only, with a specially crafted configuration file an…