Vulnetix
Try Vulnetix Request Demo
CVE-2013-1653 PUBLISHED CVSS 7.099999904632568 HIGH

Puppet before 2.6.18, 2.7.x before 2.7.21, and 3.1.x before 3.1.1, and Puppet Enterprise before 1.2.7 and 2.7.x before 2.7.2, when listening for incoming connections is enabled and allowing access to the "run" REST endpoint is allowed, allows remote authenticated users to execute arbitrary code via a crafted HTTP request.

EPSS 1.97% · 83.4th percentile

Risk Scores

CVSS v2.0
7.099999904632568
EPSS Score
1.97%
83.4th percentile

Affected Products

VendorProductVersions
puppetpuppet_enterprise2.7.1, 3.1.0, 2.7.0
puppetpuppet2.7.3, 2.7.4, 2.7.5
puppetlabspuppet2.7.19, 2.7.20, 2.7.20
canonicalubuntu_linux12.10, 11.10, 12.04
n/an/an/a

Timeline

References

Open in Interactive Console →