CVE-2017-10690 Vulnerability Details

  /     /     /  

CVE-2017-10690 Metadata Quick Info

CVE Published: 09/02/2018 | CVE Updated: 16/09/2024 | CVE Year: 2017
Source: puppet | Vendor: Puppet | Product: Puppet Enterprise
Status : PUBLISHED

---

CVE-2017-10690 Description

In previous versions of Puppet Agent it was possible for the agent to retrieve facts from an environment that it was not classified to retrieve from. This was resolved in Puppet Agent 5.3.4, included in Puppet Enterprise 2017.3.4

Metrics

CVSS Version: 3.1 | Base Score: n/a
Vector: n/a

l➤ Exploitability Metrics:
    Attack Vector (AV)*
    Attack Complexity (AC)*
    Privileges Required (PR)*
    User Interaction (UI)*
    Scope (S)*

l➤ Impact Metrics:
    Confidentiality Impact (C)*
    Integrity Impact (I)*
    Availability Impact (A)*

Weakness Enumeration (CWE)

CWE-ID:
CWE Name: Privilege Escalation
Source: Puppet

Common Attack Pattern Enumeration and Classification (CAPEC)

CAPEC-ID:
CAPEC Description:


Source: NVD (National Vulnerability Database).