Puppet Enterprise Session Handling Local Security Bypass Vulnerability
BID:61859
Info
Puppet Enterprise Session Handling Local Security Bypass Vulnerability
| Bugtraq ID: | 61859 |
| Class: | Design Error |
| CVE: |
CVE-2013-4958 |
| Remote: | No |
| Local: | Yes |
| Published: | Aug 15 2013 12:00AM |
| Updated: | Mar 19 2015 08:33AM |
| Credit: | Puppet Labs |
| Vulnerable: |
Puppetlabs Puppet Enterprise 3.0 Puppetlabs Puppet Enterprise 2.8.3 Puppetlabs Puppet Enterprise 2.8.2 Puppetlabs Puppet Enterprise 2.7.2 Puppetlabs Puppet Enterprise 2.7.1 Puppetlabs Puppet Enterprise 2.7 Puppetlabs Puppet Enterprise 2.5.2 Puppetlabs Puppet Enterprise 2.5.1 Puppetlabs Puppet Enterprise 2.0.3 Puppetlabs Puppet Enterprise 2.0.2 Puppetlabs Puppet Enterprise 1.2.7 Puppetlabs Puppet Enterprise 2.8.0 Puppetlabs Puppet Enterprise 2.6 Puppetlabs Puppet Enterprise 1.2 Puppetlabs Puppet Enterprise 1.1 Puppetlabs Puppet Enterprise 1.0 Puppetlabs Puppet Enterprise 2.0 |
| Not Vulnerable: |
Puppetlabs Puppet Enterprise 3.0.1 |
Exploit / POC
Puppet Enterprise Session Handling Local Security Bypass Vulnerability
An attacker with physical access to an affected computer can exploit this issue.
An attacker with physical access to an affected computer can exploit this issue.
Solution / Fix
Puppet Enterprise Session Handling Local Security Bypass Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.