NVD

Id
45390  
Name
CVE-2012-3864  
Description
Puppet before 2.6.17 and 2.7.x before 2.7.18, and Puppet Enterprise before 2.5.2, allows remote authenticated users to read arbitrary files on the puppet master server by leveraging an arbitrary user"s certificate and private key in a GET request.  
Reject
 
CVSS Version
2  
CVSS Score
4  
Severity
Medium  
CVSS Base Score
4  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:P/I:N/A:N)  
Pub Date
2017-01-19  
Published
2012-08-06  
Modified Date
2014-10-10  
Seq
2012-3864  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
227862 45390 CVE-2012-3864 SUSE-SU-2012:0983  View
227863 45390 CVE-2012-3864 openSUSE-SU-2012:0891  View
227864 45390 CVE-2012-3864 http://puppetlabs.com/security/cve/cve-2012-3864/  View
227865 45390 CVE-2012-3864 DSA-2511  View
227866 45390 CVE-2012-3864 USN-1506-1  View
227867 45390 CVE-2012-3864 https://bugzilla.redhat.com/show_bug.cgi?id=839130  View
227868 45390 CVE-2012-3864 https://github.com/puppetlabs/puppet/commit/10f6cb8969b4d5a933b333ecb01ce3696b1d57d4  View
227869 45390 CVE-2012-3864 https://github.com/puppetlabs/puppet/commit/c3c7462e4066bf3a563987a402bf3ddf278bcd87  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
27784 JVNDB-2012-003491 Puppet および Puppet Enterprise における任意のファイルを読まれる脆弱性 Puppet および Puppet Enterprise には、Puppet マスターサーバ上の任意のファイルを読まれる脆弱性が存在します。 CVE-2012-3864 57102 CVE-2012-3864 45390 4 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-003491.html 2012-08-06 2012-09-14 View