Arbitrary Code Execution Vulnerability in Puppet 2.6.x and Puppet Enterprise 1.2.x

CVE-2013-2274 · MEDIUM Severity

AV:N/AC:L/AU:S/C:P/I:P/A:P

Puppet 2.6.x before 2.6.18 and Puppet Enterprise 1.2.x before 1.2.7 allows remote authenticated users to execute arbitrary code on the puppet master, or an agent with puppet kick enabled, via a crafted request for a report.

Learn more about our User Device Pen Test.