{"action":"Upgrade puppet to 2.6.4 or later.","affected":[{"fixed":"2.6.4","introduced":"2.6.0"}],"component":"puppet","cve_ids":["CVE-2011-0528"],"ecosystem":"RubyGems","epss":0.01652,"exploited":false,"fixed_versions":["2.6.4"],"ghsa_id":"GHSA-9pvx-fwwh-w289","id":"tcs_01M5KEJFSQKCYA3TRX7DWFDDR1","modified_at":"2024-12-02T05:37:56.401336Z","published_at":"2022-05-14T00:56:55Z","references":["https://osv.dev/vulnerability/GHSA-9pvx-fwwh-w289","https://nvd.nist.gov/vuln/detail/CVE-2011-0528","https://github.com/puppetlabs/puppet/commit/eee1a9cdaa5cab6222c8e6ab087d319f976fa4e3","https://github.com/puppetlabs/puppet","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/puppet/CVE-2011-0528.yml","http://www.mail-archive.com/puppet-users@googlegroups.com/msg16429.html","http://www.openwall.com/lists/oss-security/2011/01/27/6","http://www.openwall.com/lists/oss-security/2011/01/31/5","http://www.ubuntu.com/usn/USN-1365-1"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-9pvx-fwwh-w289","url":"https://osv.dev/vulnerability/GHSA-9pvx-fwwh-w289"}],"summary":"Puppet does not properly restrict access to node resources"}