CVE-2018-6508

CVE-2018-6508: falha em Puppet Enterprise

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar Puppet Enterprise+ Monitorar puppetlabs/apache

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

3Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackepss 1.9%
Puppet Enterprise 2017.3.x prior to 2017.3.3 are vulnerable to a remote execution bug when a specially crafted string was passed into the facter_task or puppet_conf tasks. This vulnerability only affects tasks in the affected modules, if you are not using puppet tasks you are not affected by this vulnerability.
Produtos afetados
Puppet · Puppet EnterprisePuppet · puppetlabs/apachePuppet · puppetlabs/aptPuppet · puppetlabs/facter_taskPuppet · puppetlabs/mysqlPuppet · puppetlabs/puppet_conf
CVEs relacionadas — Puppet Enterprise

No mesmo produto, das mais perigosas para as menos.

CVE-2016-5716—CVE-2016-5716EPSS 1.8%CVE-2016-9686—CVE-2016-9686EPSS 1.3%CVE-2017-2294—CVE-2017-2294EPSS 1.2%CVE-2023-2530—CVE-2023-2530EPSS 1.1%CVE-2017-10690—CVE-2017-10690EPSS 1.0%CVE-2017-2296—CVE-2017-2296EPSS 0.9%