CVE-2013-4966

Description

The master external node classification script in Puppet Enterprise before 3.2.0 does not verify the identity of consoles, which allows remote attackers to create arbitrary classifications on the master by spoofing a console.

References

http://www.securitytracker.com/id/1029873

http://puppetlabs.com/security/cve/cve-2013-4966

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3