SecBoard
Zurück zur CVE-Übersicht

CVE-2013-4966

MEDIUM(6.4)

AV:N/AC:L/Au:N/C:P/I:P/A:N

Risk Signal Score16/100 — NIEDRIG
  • CVSS 6.4 — Mittel

EPSS-Score

0%

Exploit-Wahrscheinlichkeit (30 Tage)

CVSS Score

6.4

Technische Schwere

Beschreibung

The master external node classification script in Puppet Enterprise before 3.2.0 does not verify the identity of consoles, which allows remote attackers to create arbitrary classifications on the master by spoofing a console.

Referenzen