Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2017-2298

The mcollective-sshkey-security plugin before 0.5.1 for Puppet uses a server-specified identifier as part of a path where a file is written. A compromised server could use this to write a file to an arbitrary location on the client with the filename appended with the string "_pub.pem".

Published

2017-06-30T20:29:00.217

Last Modified

2025-04-20T01:37:25.860

Status

Deferred

Source

[email protected]

Severity

CVSSv3.1: 6.5 (MEDIUM)

CVSSv2 Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Access Vector: NETWORK
Access Complexity: MEDIUM
Authentication: NONE
Confidentiality Impact: NONE
Integrity Impact: PARTIAL
Availability Impact: NONE

Exploitability Score

8.6

Impact Score

2.9

Weaknesses

Type: Primary
CWE-20

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	puppet	mcollective-sshkey-security	≤ 0.5.0	Yes

References

https://github.com/puppetlabs/mcollective-sshkey-security/blob/0.5.1/CHANGELOG.md Third Party Advisory ([email protected])
https://github.com/puppetlabs/mcollective-sshkey-security/commit/3388a3109f4fb1c69fa8505e991bf59ca20d19a2 Third Party Advisory ([email protected])
https://puppet.com/security/cve/cve-2017-2298 Mitigation, Patch, Vendor Advisory ([email protected])
https://github.com/puppetlabs/mcollective-sshkey-security/blob/0.5.1/CHANGELOG.md Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://github.com/puppetlabs/mcollective-sshkey-security/commit/3388a3109f4fb1c69fa8505e991bf59ca20d19a2 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://puppet.com/security/cve/cve-2017-2298 Mitigation, Patch, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)