← Back

CVE-2013-1652

nvd nist
Published: Mar 20, 2013Modified: Apr 29, 2026

JSON object

Loading...
4.9
Vector
AV:N/AC:M/Au:S/C:P/I:P/A:N
Exploitability: 6.8 / Impact: 4.9
Source: NVD

Description

Puppet before 2.6.18, 2.7.x before 2.7.21, and 3.1.x before 3.1.1, and Puppet Enterprise before 1.2.7 and 2.7.x before 2.7.2 allows remote authenticated users with a valid certificate and private key to read arbitrary catalogs or poison the master's cache via unspecified vectors.

Affected (29)

Puppetlabs
1 product
Puppet
Puppet
2 products
Puppet
Puppet Enterprise
Canonical
1 product
Ubuntu Linux
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Puppet
Up to 2.6.17
Configuration B
21 vulnerable
Vulnerable SoftwareAffected Versions
Puppet
Puppet
Version 2.7.10
Puppet
Version 2.7.11
Puppet
Version 2.7.12
Puppet
Version 2.7.13
Puppet
Version 2.7.14
Puppet
Version 2.7.16
Puppet
Version 2.7.17
Puppet
Version 2.7.18
Puppet
Version 2.7.2
Puppet
Version 2.7.3
Puppet
Version 2.7.4
Puppet
Version 2.7.5
Puppet
Version 2.7.6
Puppet
Version 2.7.7
Puppet
Version 2.7.8
Puppet
Version 2.7.9
Puppetlabs
Puppet
Version 2.7.0
Puppet
Version 2.7.19
Puppet
Version 2.7.1
Puppet
Version 2.7.20
Puppet
Version 2.7.20 rc1
Configuration C
1 vulnerable
Vulnerable SoftwareAffected Versions
Puppet Enterprise
Version 3.1.0
Configuration D
1 vulnerable
Vulnerable SoftwareAffected Versions
Puppet
Up to 1.2.6
Configuration E
2 vulnerable
Vulnerable SoftwareAffected Versions
Puppet
Puppet Enterprise
Version 2.7.0
Puppet Enterprise
Version 2.7.1
Configuration F
3 vulnerable
Vulnerable SoftwareAffected Versions
Canonical
Ubuntu Linux
Version 11.10
Ubuntu Linux
Version 12.04
Ubuntu Linux
Version 12.10

Related CWEs

CWE-264
CWE-264

References (16)

Source: cve@mitre.org
Mailing ListThird Party Advisory
Source: cve@mitre.org
Mailing ListThird Party Advisory
Source: cve@mitre.org
Third Party Advisory
Source: cve@mitre.org
Third Party AdvisoryVendor Advisory
Source: cve@mitre.org
Third Party Advisory
Source: cve@mitre.org
Third Party Advisory
Source: cve@mitre.org
Third Party AdvisoryVDB Entry
Source: cve@mitre.org
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.