CVE-2018-6516

State: Published
Severity: Not scored
Published: Jun 14, 2018
Updated: Sep 16, 2024
Reserved: Feb 1, 2018

Description

On Windows only, with a specifically crafted configuration file an attacker could get Puppet PE client tools (aka pe-client-tools) 16.4.x prior to 16.4.6, 17.3.x prior to 17.3.6, and 18.1.x prior to 18.1.2 to load arbitrary code with privilege escalation.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
pe-client-toolsPuppet	16.4.x prior to 16.4.6Affected 17.3.x prior to 17.3.6Affected 18.1.x prior to 18.1.2Affected

References

https://puppet.com/security/cve/CVE-2018-6516

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.