VulnerabilityModified

CVE-2014-3248

MEDIUM 6.2EPSS 0.54%

Does this matter?

Lower severity and a low EPSS score (0.54%). Track it; it rarely justifies an emergency change on its own.

Description

Untrusted search path vulnerability in Puppet Enterprise 2.8 before 2.8.7, Puppet before 2.7.26 and 3.x before 3.6.2, Facter 1.6.x and 2.x before 2.0.2, Hiera before 1.3.4, and Mcollective before 2.5.2, when running with Ruby 1.9.1 or earlier, allows local users to gain privileges via a Trojan horse file in the current working directory, as demonstrated using (1) rubygems/defaults/operating_system.rb, (2) Win32API.rb, (3) Win32API.so, (4) safe_yaml.rb, (5) safe_yaml/deep.rb, or (6) safe_yaml/deep.so; or (7) operatingsystem.rb, (8) operatingsystem.so, (9) osfamily.rb, or (10) osfamily.so in puppet/confine.

CVSS 2.0: 6.2 MEDIUMAV:L/AC:H/Au:N/C:C/I:C/A:C
EPSS: 0.54% probability · 44th percentile
CISA KEV: Not listed
Weakness: CWE-17
Affected: puppet/facter · puppetlabs/facter · puppet/marionette collective · puppet/hiera · puppet/puppet · puppet/puppet enterprise
Source: cve@mitre.org

References

http://puppetlabs.com/security/cve/cve-2014-3248Vendor Advisory
http://rowediness.com/2014/06/13/cve-2014-3248-a-little-problem-with-puppet/Exploit, Technical Description
http://secunia.com/advisories/59197Technical Description
http://secunia.com/advisories/59200Technical Description
http://www.securityfocus.com/bid/68035Third Party Advisory, VDB Entry
http://puppetlabs.com/security/cve/cve-2014-3248Vendor Advisory
http://rowediness.com/2014/06/13/cve-2014-3248-a-little-problem-with-puppet/Exploit, Technical Description
http://secunia.com/advisories/59197Technical Description
http://secunia.com/advisories/59200Technical Description
http://www.securityfocus.com/bid/68035Third Party Advisory, VDB Entry

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.