CVE-2017-10690

puppet: Environment leakage in puppet-agent

Published Feb 9, 2018 CVSS 3.0 · 6.5 Medium EPSS 1.0% KEV · Not listed
Description
In previous versions of Puppet Agent it was possible for the agent to retrieve facts from an environment that it was not classified to retrieve from. This was resolved in Puppet Agent 5.3.4, included in Puppet Enterprise 2017.3.4

Analysis

No analysis available yet

Remediation

No remediation available yet

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2017-2336 In previous versions of Puppet Agent it was possible for the agent to retrieve facts from an environment that it was not classified to retrieve from. This was resolved in Puppet Agent 5.3.4, included in Puppet Enterprise 2017.3.4
History

No history.

Weaknesses
  • CWE-203

    Observable Discrepancy

  • CWE-269

    Improper Privilege Management

Sources

Status
PUBLISHED
Assigner
puppet
Published
Updated
Sep 16, 2024, 5:49 PM
Reserved
Jun 29, 2017, 12:00 AM
Status
Modified
Published
Feb 9, 2018, 8:29 PM
Modified
Jun 17, 2026, 1:00 AM
Severity
Moderate
Public date
Feb 5, 2018, 12:00 AM