CVE-2018-6513
High
Description
Puppet Enterprise 2016.4.x prior to 2016.4.12, Puppet Enterprise 2017.3.x prior to 2017.3.7, Puppet Enterprise 2018.1.x prior to 2018.1.1, Puppet Agent 1.10.x prior to 1.10.13, Puppet Agent 5.3.x prior to 5.3.7, and Puppet Agent 5.5.x prior to 5.5.2, were vulnerable to an attack where an unprivileged user on Windows agents could write custom facts that can escalate privileges on the next puppet run. This was possible through the loading of shared libraries from untrusted paths.
SeverityHigh
CVSS8.8
Exploit probability—
ProductPuppet
PublishedJun 11, 2018
First seenJun 11, 2018
How to fix
Update
- puppet puppet1.10.13, 5.3.7, 5.5.2 or later
- puppet puppet_enterprise2016.4.12, 2017.3.7, 2018.1.1 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| puppet puppet | 1.10.0 ≤ v < 1.10.13, 5.3.0 ≤ v < 5.3.7, 5.5.0 ≤ v < 5.5.2 | 1.10.13, 5.3.7, 5.5.2 |
| puppet puppet_enterprise | 2016.4.0 ≤ v < 2016.4.12, 2017.3.0 ≤ v < 2017.3.7, 2018.1.0 ≤ v < 2018.1.1 | 2016.4.12, 2017.3.7, 2018.1.1 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.