CVE

Id
57109  
CVE No.
CVE-2012-3866  
Status
Candidate  
Description
lib/puppet/defaults.rb in Puppet 2.7.x before 2.7.18, and Puppet Enterprise before 2.5.2, uses 0644 permissions for last_run_report.yaml, which allows local users to obtain sensitive configuration information by leveraging access to the puppet master server to read this file.  
Phase
Assigned (20120706)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
590414 57109 CVE-2012-3866 CONFIRM:http://puppetlabs.com/security/cve/cve-2012-3866/  View
590415 57109 CVE-2012-3866 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=839135  View
590416 57109 CVE-2012-3866 CONFIRM:https://github.com/puppetlabs/puppet/commit/fd44bf5e6d0d360f6a493d663b653c121fa83c3f  View
590417 57109 CVE-2012-3866 DEBIAN:DSA-2511  View
590418 57109 CVE-2012-3866 URL:http://www.debian.org/security/2012/dsa-2511  View
590419 57109 CVE-2012-3866 SUSE:openSUSE-SU-2012:0891  View
590420 57109 CVE-2012-3866 URL:http://lists.opensuse.org/opensuse-updates/2012-07/msg00036.html  View
590421 57109 CVE-2012-3866 UBUNTU:USN-1506-1  View
590422 57109 CVE-2012-3866 URL:http://www.ubuntu.com/usn/USN-1506-1  View
590423 57109 CVE-2012-3866 SECUNIA:50014  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
30129 JVNDB-2012-005836 Open Constructor におけるクロスサイトスクリプティングの脆弱性 Open Constructor の data/hybrid/i_hybrid.php には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2012-3871 57109 3.5 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-005836.html  View