{"action":"Upgrade puppet to 2.6.14 or later.","affected":[{"fixed":"2.6.14","introduced":"2.6"},{"fixed":"2.7.11","introduced":"2.7"}],"component":"puppet","cve_ids":["CVE-2012-1053"],"ecosystem":"RubyGems","epss":0.00384,"exploited":false,"fixed_versions":["2.6.14","2.7.11"],"ghsa_id":"GHSA-77hg-g8cc-5r37","id":"tcs_01M5KEHM3KD9QZ1RHKNKNXMJAH","modified_at":"2024-11-28T05:39:04.125231Z","published_at":"2022-05-14T00:56:44Z","references":["https://osv.dev/vulnerability/GHSA-77hg-g8cc-5r37","https://nvd.nist.gov/vuln/detail/CVE-2012-1053","https://github.com/puppetlabs/puppet/commit/76d0749f0a9a496b70e7dc7e6d6d6ff692224e36","https://exchange.xforce.ibmcloud.com/vulnerabilities/73445","https://ubuntu.com/usn/usn-1372-1","https://web.archive.org/web/20120504011717/http://puppetlabs.com/security/cve/cve-2012-1053","https://web.archive.org/web/20120513215447/http://projects.puppetlabs.com/issues/12458","https://web.archive.org/web/20120513215653/http://projects.puppetlabs.com/issues/12457","https://web.archive.org/web/20120513223437/http://projects.puppetlabs.com/issues/12459","https://web.archive.org/web/20120527071855/http://www.securityfocus.com/bid/52158","https://web.archive.org/web/20120816020421/http://projects.puppetlabs.com/projects/1/wiki/Release_Notes#2.6.14","https://www.debian.org/security/2012/dsa-2419"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-77hg-g8cc-5r37","url":"https://osv.dev/vulnerability/GHSA-77hg-g8cc-5r37"}],"summary":"Puppet Privilege Escallation"}