VulnerabilityModified
CVE-2011-3848
Directory traversal vulnerability in Puppet 2.6.x before 2.6.10 and 2.7.x before 2.7.4 allows remote attackers to write X.509 Certificate Signing Request (CSR) to arbitrary locations via (1) a double-encoded key parameter in the URI in 2.7.x, (2) the CN…
MEDIUM 5.0EPSS 1.11%
Does this matter?
Lower severity and a low EPSS score (1.11%). Track it; it rarely justifies an emergency change on its own.
Description
Directory traversal vulnerability in Puppet 2.6.x before 2.6.10 and 2.7.x before 2.7.4 allows remote attackers to write X.509 Certificate Signing Request (CSR) to arbitrary locations via (1) a double-encoded key parameter in the URI in 2.7.x, (2) the CN in the Subject of a CSR in 2.6 and 0.25.
- CVSS 2.0
- 5.0 MEDIUMAV:N/AC:L/Au:N/C:N/I:P/A:N
- EPSS
- 1.11% probability · 64th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-22
- Affected
- puppet/puppet · puppetlabs/puppet
- Source
- cve@mitre.org
References
- http://lists.opensuse.org/opensuse-updates/2011-10/msg00033.html
- http://secunia.com/advisories/46628Vendor Advisory
- http://www.debian.org/security/2011/dsa-2314
- http://www.ubuntu.com/usn/USN-1217-1
- https://groups.google.com/group/puppet-announce/browse_thread/thread/e57ce2740feb9406Patch
- https://puppet.com/security/cve/cve-2011-3848
- http://lists.opensuse.org/opensuse-updates/2011-10/msg00033.html
- http://secunia.com/advisories/46628Vendor Advisory
- http://www.debian.org/security/2011/dsa-2314
- http://www.ubuntu.com/usn/USN-1217-1
- https://groups.google.com/group/puppet-announce/browse_thread/thread/e57ce2740feb9406Patch
- https://puppet.com/security/cve/cve-2011-3848
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.