QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2012-3866

Back to search

CVE-2012-3866

Published: Aug 6, 2012

Modified: Aug 6, 2024

PUBLISHED

Description

lib/puppet/defaults.rb in Puppet 2.7.x before 2.7.18, and Puppet Enterprise before 2.5.2, uses 0644 permissions for last_run_report.yaml, which allows local users to obtain sensitive configuration information by leveraging access to the puppet master server to read this file.

VendorProductVersions

n/a

n/a

affected
n/a

References

DSA-2511
vendor-advisory
x_refsource_DEBIAN
USN-1506-1
vendor-advisory
x_refsource_UBUNTU
50014
third-party-advisory
x_refsource_SECUNIA
openSUSE-SU-2012:0891
vendor-advisory
x_refsource_SUSE

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now