Puppet before 2.6.18, 2.7.x before 2.7.21, and 3.1.x before 3.1.1, and Puppet Enterprise before 1.2.7 and 2.7.x before 2.7.2 allows remote authenticated users with a valid certificate and private key to read arbitrary catalogs or poison the master's cache via unspecified vectors.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2013-03-20T16:00:00
Updated: 2024-08-06T15:13:31.710Z
Reserved: 2013-02-11T00:00:00
Link: CVE-2013-1652
Vulnrichment
No data.
NVD
Status : Modified
Published: 2013-03-20T16:55:01.753
Modified: 2024-11-21T01:50:05.040
Link: CVE-2013-1652
Redhat