RubyGems/puppet CVE-2011-0528: medium, EPSS 1.65%

Puppet does not properly restrict access to node resources

Action: Upgrade puppet to 2.6.4 or later.

bundle update puppet

Affected

Fixed versions

Sources

• osv: GHSA-9pvx-fwwh-w289
• https://nvd.nist.gov/vuln/detail/CVE-2011-0528
• https://github.com/puppetlabs/puppet/commit/eee1a9cdaa5cab6222c8e6ab087d319f976fa4e3
• https://github.com/puppetlabs/puppet
• https://github.com/rubysec/ruby-advisory-db/blob/master/gems/puppet/CVE-2011-0528.yml
• http://www.mail-archive.com/puppet-users@googlegroups.com/msg16429.html
• http://www.openwall.com/lists/oss-security/2011/01/27/6
• http://www.openwall.com/lists/oss-security/2011/01/31/5
• http://www.ubuntu.com/usn/USN-1365-1

CVE-2011-0528 · published 2022-05-14T00:56:55Z · modified 2024-12-02T05:37:56.401336Z · JSON