Description (CNA)
On Windows only, with a specifically crafted configuration file an attacker could get Puppet PE client tools (aka pe-client-tools) 16.4.x prior to 16.4.6, 17.3.x prior to 17.3.6, and 18.1.x prior to 18.1.2 to load arbitrary code with privilege escalation.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Puppet / pe-client-tools | affected 16.4.x prior to 16.4.6; affected 17.3.x prior to 17.3.6; affected 18.1.x prior to 18.1.2 |
CWE
No CWE identifiers supplied.
References
ADP enrichment
No English description supplied.