{"action":"Upgrade puppet to 4.4.2 or later.","affected":[{"fixed":"4.4.2","introduced":"4.0.0"}],"component":"puppet","cve_ids":["CVE-2016-2785"],"ecosystem":"RubyGems","epss":0.02889,"exploited":false,"fixed_versions":["4.4.2"],"ghsa_id":"GHSA-pqj5-7r86-64fv","id":"tcs_01M5KEMP2SX8RYY802EEGZAEB2","modified_at":"2024-02-16T08:03:18.529605Z","published_at":"2022-05-13T01:06:16Z","references":["https://osv.dev/vulnerability/GHSA-pqj5-7r86-64fv","https://nvd.nist.gov/vuln/detail/CVE-2016-2785","https://github.com/puppetlabs/puppet/commit/6592a8166572e5f1b7d058474059b8519ec81387","https://github.com/puppetlabs/puppet","https://github.com/puppetlabs/puppet/commits/4.4.2","https://puppet.com/security/cve/cve-2016-2785","https://security.gentoo.org/glsa/201606-02"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-pqj5-7r86-64fv","url":"https://osv.dev/vulnerability/GHSA-pqj5-7r86-64fv"}],"summary":"Puppet Improper Access Control"}