vulnerability

SUSE: CVE-2017-10689: SUSE Linux Security Advisory

Severity
2
CVSS
(AV:L/AC:L/Au:N/C:N/I:P/A:N)
Published
Feb 9, 2018
Added
Feb 20, 2018
Modified
Feb 4, 2022

Description

In previous versions of Puppet Agent it was possible to install a module with world writable permissions. Puppet Agent 5.3.4 and 1.10.10 included a fix to this vulnerability.

Solutions

suse-upgrade-puppetsuse-upgrade-puppet-serversuse-upgrade-ruby2-1-rubygem-puppetsuse-upgrade-rubygem-puppet
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.