Common Vulnerabilities and Exposures |
|
||||
| CVE-ID | ||
|---|---|---|
CVE-2012-1054 |
• Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings
|
|
| Description | ||
| Puppet 2.6.x before 2.6.14 and 2.7.x before 2.7.11, and Puppet Enterprise (PE) Users 1.0, 1.1, 1.2.x, 2.0.x before 2.0.3, when managing a user login file with the k5login resource type, allows local users to gain privileges via a symlink attack on .k5login. | ||
| References | ||
| Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete. | ||
|
||
| Assigning CNA | ||
| N/A | ||
| Date Entry Created | ||
| 20120213 | Disclaimer: The entry creation date may reflect when the CVE-ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE. | |
| Phase (Legacy) | ||
| Assigned (20120213) | ||
| Votes (Legacy) | ||
| Comments (Legacy) | ||
| Proposed (Legacy) | ||
| N/A | ||
| This is an entry on the CVE list, which standardizes names for security problems. | ||
|
You can also search by reference using the CVE Reference Maps.
|
||
| For More Information: cve@mitre.org | ||
