CVE-2017-10689

CVE-2017-10689: vulnerability in Puppet Agent

Published · Updated

Follow this CVE+ Monitor Puppet Enterprise+ Monitor Puppet Agent

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 0.4%
In previous versions of Puppet Agent it was possible to install a module with world writable permissions. Puppet Agent 5.3.4 and 1.10.10 included a fix to this vulnerability.
Affected products
Puppet · Puppet AgentPuppet · Puppet Enterprise
Related CVEs — Puppet Agent

In the same product, most dangerous first.

CVE-2016-5713—CVE-2016-5713EPSS 2.0%CVE-2018-6508—CVE-2018-6508EPSS 1.9%CVE-2016-5716—CVE-2016-5716EPSS 1.8%CVE-2016-9686—CVE-2016-9686EPSS 1.3%CVE-2017-2294—CVE-2017-2294EPSS 1.2%CVE-2023-2530—CVE-2023-2530EPSS 1.1%