VULNERABILITY INTELLIGENCE

CVE-2013-2274

CVSS score6.5 MEDIUM
EPSS probability2.91%
CISA KEVNot currently listed
Published2013-03-20
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:S/C:P/I:P/A:P

Description

Puppet 2.6.x before 2.6.18 and Puppet Enterprise 1.2.x before 1.2.7 allows remote authenticated users to execute arbitrary code on the puppet master, or an agent with puppet kick enabled, via a crafted request for a report.

Primary references