Tracker / CVE-2018-6516
CVE-2018-6516
High 7.8
On Windows only, with a specifically crafted configuration file an attacker could get Puppet PE client tools (aka pe-client-tools) 16.4.x prior to 16.4.6, 17.3.x prior to 17.3.6, and 18.1.x prior to 18.1.2 to load arbitrary code with privilege escalation.
Affected products and versions
| puppet | puppet_enterprise_client_tools · 16.4.0 → 16.4.6 |
|---|---|
| puppet | puppet_enterprise_client_tools · 17.3.0 → 17.3.6 |
| puppet | puppet_enterprise_client_tools · 18.1.0 → 18.1.2 |
Analysis
This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.