CVE-2017-10689 PUBLISHED

In previous versions of Puppet Agent it was possible to install a module with world writable permissions. Puppet Agent 5.3.4 and 1.10.10 included a fix to this vulnerability.

EPSS 0.09% · 25.8th percentile

Risk Scores

EPSS Score
0.09%
25.8th percentile

Affected Products

VendorProductVersions
Ubuntu:Pro:16.04:LTSpuppet0, 3.7.2-5ubuntu2, 3.8.4-1ubuntu1
Ubuntu:14.04:LTSpuppet3.4.3-1, 3.4.3-1ubuntu1, 0

Timeline

References

Open in Interactive Console →