← Back

Puppet

puppet

Vendor: Reductivelabs • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2009-3564
1Reductivelabs
1Puppet
Apr 23, 2026
Oct 6, 2009
N/A· v4
N/A· v3
4.7 MEDIUM· v2
puppetmasterd in puppet 0.24.6 does not reset supplementary groups when it switches to a different user, which might allow local users to access restricted files.