← Back

Mcollective Sshkey Security

mcollective-sshkey-security

Vendor: Puppet • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2017-2298
1Puppet
1Mcollective Sshkey Security
May 13, 2026
Jun 30, 2017
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
The mcollective-sshkey-security plugin before 0.5.1 for Puppet uses a server-specified identifier as part of a path where a file is written. A compromised server could use this to write a file to an arbitrary location on...Show more
The mcollective-sshkey-security plugin before 0.5.1 for Puppet uses a server-specified identifier as part of a path where a file is written. A compromised server could use this to write a file to an arbitrary location on the client with the filename appended with the string "_pub.pem".Show less