Vulnerability in Puppet Enterprise
CVE-2013-2716
Puppet Labs Puppet Enterprise before 2.8.0 does not use a "randomized secret" in the CAS client config file (cas_client_config.yml) when upgrading from older 1.2.x or 2.0.x versions, which allows remote attackers to obtain console access via a crafted cookie.
Vulnerability class: POODLE (CVE-2014-3566)
Published · last modified .
CVSS v2 metric
CVSS v2 base score 5.0 (Medium). Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N. This CVE predates CVSS v3 and has no v3 score from NVD.
EPSS exploit prediction
EPSS: 0.013 (69.7th percentile), scored .
Low probability of exploitation in the next 30 days, but still tracked. 70th percentile — 69.7% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.013 · newest: 0.013 · change: 0.000
Affected products
- Puppet Enterprise — versions 2.0.0, 2.5.1, 2.5.2
- Puppetlabs Puppet — versions 1.0.0, 1.1.0, 1.2.0
Weakness classification (CWE)
References
- exchange.xforce.ibmcloud.com/vulnerabilities/83171 (vdb-entry)
- secunia.com/advisories/52862 (Vendor Advisory, third-party-advisory)
- puppetlabs.com/security/cve/cve-2013-2716/ (Vendor Advisory)