CVE-2013-2274
Publication date 12 March 2013
Last updated 24 July 2024
Ubuntu priority
Puppet 2.6.x before 2.6.18 and Puppet Enterprise 1.2.x before 1.2.7 allows remote authenticated users to execute arbitrary code on the puppet master, or an agent with puppet kick enabled, via a crafted request for a report.