Beveiligingsadvies

CVE-2017-2293

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2018-02-01 22:00:00

Laatst bijgewerkt 2024-09-16 17:33:31

Toegewezen door puppet

CVSS-score geen score

Status PUBLISHED

Beschrijving

Versions of Puppet Enterprise prior to 2016.4.5 or 2017.2.1 shipped with an MCollective configuration that allowed the package plugin to install or remove arbitrary packages on all managed agents. This release adds default configuration to not allow these actions. Customers who rely on this functionality can change this policy.

← Alle CVE's bekijken Bekijk op cve.org ↗