VulnerabilityModified
CVE-2016-2785
Puppet Server before 2.3.2 and Ruby puppetmaster in Puppet 4.x before 4.4.2 and in Puppet Agent before 1.4.2 might allow remote attackers to bypass intended auth.conf access restrictions by leveraging incorrect URL decoding.
CRITICAL 9.8EPSS 2.89%
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (2.89%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
Puppet Server before 2.3.2 and Ruby puppetmaster in Puppet 4.x before 4.4.2 and in Puppet Agent before 1.4.2 might allow remote attackers to bypass intended auth.conf access restrictions by leveraging incorrect URL decoding.
- CVSS 3.1
- 9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- EPSS
- 2.89% probability · 86th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-284
- Affected
- puppet/puppet · puppet/puppet server · puppet/puppet agent
- Source
- cve@mitre.org
References
- https://github.com/puppetlabs/puppet/pull/4921/commits/8d2ce797db265720f0a20d1d46ee2757b4e4f6b2Vendor Advisory
- https://puppet.com/security/cve/cve-2016-2785Vendor Advisory
- https://security.gentoo.org/glsa/201606-02Third Party Advisory
- https://github.com/puppetlabs/puppet/pull/4921/commits/8d2ce797db265720f0a20d1d46ee2757b4e4f6b2Vendor Advisory
- https://puppet.com/security/cve/cve-2016-2785Vendor Advisory
- https://security.gentoo.org/glsa/201606-02Third Party Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.