VulnerabilityModified

CVE-2013-2275

The default configuration for puppet masters 0.25.0 and later in Puppet before 2.6.18, 2.7.x before 2.7.21, and 3.1.x before 3.1.1, and Puppet Enterprise before 1.2.7 and 2.7.x before 2.7.2, allows remote authenticated nodes to submit reports for other…

MEDIUM 4.0EPSS 2.91%

Does this matter?

Lower severity and a low EPSS score (2.91%). Track it; it rarely justifies an emergency change on its own.

Description

CVSS 2.0: 4.0 MEDIUMAV:N/AC:L/Au:S/C:N/I:P/A:N
EPSS: 2.91% probability · 86th percentile
CISA KEV: Not listed
Affected: puppet/puppet · puppetlabs/puppet · puppet/puppet enterprise · canonical/ubuntu linux
Source: cve@mitre.org

References

http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00004.htmlThird Party Advisory
http://lists.opensuse.org/opensuse-updates/2013-04/msg00056.htmlThird Party Advisory
http://rhn.redhat.com/errata/RHSA-2013-0710.htmlThird Party Advisory
http://secunia.com/advisories/52596Third Party Advisory
http://ubuntu.com/usn/usn-1759-1Third Party Advisory
http://www.debian.org/security/2013/dsa-2643Third Party Advisory
http://www.securityfocus.com/bid/58449Third Party Advisory, VDB Entry
https://puppetlabs.com/security/cve/cve-2013-2275/Vendor Advisory
http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00004.htmlThird Party Advisory
http://lists.opensuse.org/opensuse-updates/2013-04/msg00056.htmlThird Party Advisory
http://rhn.redhat.com/errata/RHSA-2013-0710.htmlThird Party Advisory
http://secunia.com/advisories/52596Third Party Advisory
http://ubuntu.com/usn/usn-1759-1Third Party Advisory
http://www.debian.org/security/2013/dsa-2643Third Party Advisory
http://www.securityfocus.com/bid/58449Third Party Advisory, VDB Entry
https://puppetlabs.com/security/cve/cve-2013-2275/Vendor Advisory

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.