8.5

CVE-2013-1398

The pe_mcollective module in Puppet Enterprise (PE) before 2.7.1 does not properly restrict access to a catalog of private SSL keys, which allows remote authenticated users to obtain sensitive information and gain privileges by leveraging root access to a node, related to the master role.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Puppet ≫ Puppet Enterprise Version <= 2.7.0
Puppet ≫ Puppet Enterprise Version 2.0.0
Puppet ≫ Puppet Enterprise Version 2.5.1
Puppet ≫ Puppet Enterprise Version 2.5.2
Puppetlabs ≫ Puppet Version 2.5.0 Update - Edition enterprise
Puppetlabs ≫ Puppet Version 2.6.0 Update - Edition enterprise
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.55% 0.721
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 8.5 6.8 10
AV:N/AC:M/Au:S/C:C/I:C/A:C
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://puppetlabs.com/security/cve/cve-2013-1398
Vendor Advisory