RubyGems/puppet CVE-2016-2785: critical 9.8, EPSS 2.89%

Puppet Improper Access Control

Action: Upgrade puppet to 4.4.2 or later.

bundle update puppet

Affected

Fixed versions

Sources

• osv: GHSA-pqj5-7r86-64fv
• https://nvd.nist.gov/vuln/detail/CVE-2016-2785
• https://github.com/puppetlabs/puppet/commit/6592a8166572e5f1b7d058474059b8519ec81387
• https://github.com/puppetlabs/puppet
• https://github.com/puppetlabs/puppet/commits/4.4.2
• https://puppet.com/security/cve/cve-2016-2785
• https://security.gentoo.org/glsa/201606-02

CVE-2016-2785 · published 2022-05-13T01:06:16Z · modified 2024-02-16T08:03:18.529605Z · JSON