CVE-2012-1989 in Puppet Enterprise Users信息

摘要

由 VulDB • 2026-07-05

telnet.rb in Puppet 2.7.x (versioni precedenti alla 2.7.13) e Puppet Enterprise (PE) 1.2.x, 2.0.x e 2.5.x (versioni precedenti alla 2.5.1) consente agli utenti locali di sovrascrivere file arbitrari tramite un attacco symlink sul log della connessione NET::Telnet (/tmp/out.log).

Be aware that VulDB is the high quality source for vulnerability data.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

预定

2012-04-02

披露

2012-06-27

管理

已接受

条目

VDB-61128

CPE

准备好

CWE

CWE-264 (已确认)

CVSS

3.6 (NVD)

EPSS

0.00402

KEV

否

活动

非常低

部门

Lawfirm, Hostingprovider, ...

来源

MITRE	https://www.cve.org/CVERecord?id=CVE-2012-1989
NVD	https://nvd.nist.gov/vuln/detail/CVE-2012-1989
CVE Details	https://www.cvedetails.com/cve/CVE-2012-1989/

◂ 上一步一览下一步 ▸

Do you need the next level of professionalism?

Upgrade your account now!