Puppet 2.6.16

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:puppet:puppet:2.6.16:*:*:*:*:*:*:*

part: a version: 2.6.16 update: *

VendorPuppet (056a1ba3-12b3-5ecf-a97f-ab3b403c7816)
ProductPuppet (7d8fb82a-9b62-59b4-94cc-efb68e8fe2b8)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/puppet purl2cpe 2026-06-01 10:14:37.053634
pkg:deb/ubuntu/puppet purl2cpe 2026-06-01 10:14:37.053635
pkg:github/puppetlabs/puppet purl2cpe 2026-06-01 10:14:37.053636
pkg:puppet/open-source-puppet purl2cpe 2026-06-01 10:14:37.053638
pkg:rpm/fedora/puppet purl2cpe 2026-06-01 10:14:37.053639
pkg:rpm/opensuse/puppet purl2cpe 2026-06-01 10:14:37.053641

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2013-2275 vulnerable 2026-06-03 14:33:00.525414 Details available
The default configuration for puppet masters 0.25.0 and later in Puppet before 2.6.18, 2.7.x before 2.7.21, and 3.1.x before 3.1.1, and Puppet Enterprise before 1.2.7 and 2.7.x before 2.7.2, allows remote authenticated nodes to submit reports for other nodes via unspecified vectors.
Published: 2013-03-20T16:00:00.000Z
Updated: 2024-08-06T15:27:41.177Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-2274 vulnerable 2026-06-03 14:33:00.522825 Details available
Puppet 2.6.x before 2.6.18 and Puppet Enterprise 1.2.x before 1.2.7 allows remote authenticated users to execute arbitrary code on the puppet master, or an agent with puppet kick enabled, via a crafted request for a report.
Published: 2013-03-20T16:00:00.000Z
Updated: 2024-08-06T15:27:41.143Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.