Description (CNA)
In previous versions of Puppet Agent it was possible to install a module with world writable permissions. Puppet Agent 5.3.4 and 1.10.10 included a fix to this vulnerability.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Puppet / Puppet Enterprise | affected prior to 2016.4.10 or 2017.3.4 |
| Puppet / Puppet Agent | affected prior to 5.3.4 or 1.10.10 |
CWE
No CWE identifiers supplied.
References
- https://usn.ubuntu.com/3567-1/
- https://puppet.com/security/cve/CVE-2017-10689
- https://access.redhat.com/errata/RHSA-2018:2927
ADP enrichment
No English description supplied.