NVD

Id
37823  
Name
CVE-2013-1652  
Description
Puppet before 2.6.18, 2.7.x before 2.7.21, and 3.1.x before 3.1.1, and Puppet Enterprise before 1.2.7 and 2.7.x before 2.7.2 allows remote authenticated users with a valid certificate and private key to read arbitrary catalogs or poison the master"s cache via unspecified vectors.  
Reject
 
CVSS Version
2  
CVSS Score
4.9  
Severity
Medium  
CVSS Base Score
4.9  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
6.8  
CVSS Vector
(AV:N/AC:M/Au:S/C:P/I:P/A:N)  
Pub Date
2017-01-18  
Published
2013-03-20  
Modified Date
2013-04-12  
Seq
2013-1652  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
192561 37823 CVE-2013-1652 SUSE-SU-2013:0618  View
192562 37823 CVE-2013-1652 openSUSE-SU-2013:0641  View
192563 37823 CVE-2013-1652 RHSA-2013:0710  View
192564 37823 CVE-2013-1652 USN-1759-1  View
192565 37823 CVE-2013-1652 DSA-2643  View
192566 37823 CVE-2013-1652 58443  View
192567 37823 CVE-2013-1652 https://puppetlabs.com/security/cve/cve-2013-1652/  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
20382 JVNDB-2013-001957 Puppet における任意のカタログを読まれる脆弱性 Puppet および Puppet Enterprise には、任意のカタログを読まれる、またはマスタのキャッシュをポイズニングされる脆弱性が存在します。 CVE-2013-1652 61594 CVE-2013-1652 37823 4.9 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-001957.html 2013-03-12 2013-04-23 View