Puppet Enterprise CVE-2013-4963 Multiple Cross Site Request Forgery Vulnerabilities
BID:66541
Info
Puppet Enterprise CVE-2013-4963 Multiple Cross Site Request Forgery Vulnerabilities
| Bugtraq ID: | 66541 |
| Class: | Input Validation Error |
| CVE: |
CVE-2013-4963 |
| Remote: | Yes |
| Local: | No |
| Published: | Aug 15 2013 12:00AM |
| Updated: | Mar 19 2015 09:10AM |
| Credit: | The vendor reported these issues. |
| Vulnerable: |
Puppet Labs Puppet Enterprise 2.5.1 Puppet Labs Puppet Enterprise 2.0.3 Puppet Labs Puppet Enterprise 2.0.2 Puppet Labs Puppet Enterprise 2.6 Puppet Labs Puppet Enterprise 1.2 Puppet Labs Puppet Enterprise 1.1 Puppet Labs Puppet Enterprise 1.0 Puppet Labs Puppet Enterprise 2.0 |
| Not Vulnerable: | |
Discussion
Puppet Enterprise CVE-2013-4963 Multiple Cross Site Request Forgery Vulnerabilities
Puppet Enterprise is prone to multiple cross-site request-forgery vulnerabilities.
Exploiting these issues may allow a remote attacker to perform certain unauthorized actions. This may lead to further attacks.
Puppet Enterprise prior to 3.0.1 are vulnerable.
Puppet Enterprise is prone to multiple cross-site request-forgery vulnerabilities.
Exploiting these issues may allow a remote attacker to perform certain unauthorized actions. This may lead to further attacks.
Puppet Enterprise prior to 3.0.1 are vulnerable.
Exploit / POC
Puppet Enterprise CVE-2013-4963 Multiple Cross Site Request Forgery Vulnerabilities
To exploit these issues, an attacker must entice an unsuspecting victim to follow a malicious URI or visit a malicious website.
To exploit these issues, an attacker must entice an unsuspecting victim to follow a malicious URI or visit a malicious website.
Solution / Fix
Puppet Enterprise CVE-2013-4963 Multiple Cross Site Request Forgery Vulnerabilities
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.