CVE-2011-0528
- State
- Published
- Severity
- Not scored
- Published
- Feb 17, 2014
- Updated
- Aug 6, 2024
- Reserved
- Jan 20, 2011
Description
Puppet 2.6.0 through 2.6.3 does not properly restrict access to node resources, which allows remote authenticated Puppet nodes to read or modify the resources of other nodes via unspecified vectors.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- USN-1365-1vendor-advisory
- [oss-security] 20110127 CVE request: puppetmailing-list
- [puppet-users] 20101201 SECURITY: Authorization vulnerability in Puppet 2.6.xmailing-list
- [oss-security] 20110127 Re: CVE request: puppetmailing-list
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.