CVE-2016-5713

CVE-2016-5713: falha em Puppet Agent

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar Puppet Agent+ Monitorar puppet

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

3Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackepss 2.0%
Versions of Puppet Agent prior to 1.6.0 included a version of the Puppet Execution Protocol (PXP) agent that passed environment variables through to Puppet runs. This could allow unauthorized code to be loaded. This bug was first introduced in Puppet Agent 1.3.0.
Produtos afetados
Puppet · Puppet Agent
CVEs relacionadas — Puppet Agent

No mesmo produto, das mais perigosas para as menos.

CVE-2017-10690—CVE-2017-10690EPSS 1.0%CVE-2018-6515—CVE-2018-6515EPSS 0.8%CVE-2018-6514—CVE-2018-6514EPSS 0.8%CVE-2020-7942—CVE-2020-7942EPSS 0.8%CVE-2017-10689—CVE-2017-10689EPSS 0.4%