Approved changes feed: RSS · Atom

cpe:2.3:a:puppetlabs:puppet:2.6.17:*:*:*:*:*:*:*

part: a version: 2.6.17 update: *

VendorPuppetlabs (e023c4c9-4ef3-5dfc-811f-40b125d813f1)
ProductPuppet (f85421cc-fb88-5f61-ac25-5034f11e702a)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:deb/debian/puppet purl2cpe 2026-06-01 10:11:47.065591
pkg:deb/ubuntu/puppet purl2cpe 2026-06-01 10:11:47.065593
pkg:gem/puppet purl2cpe 2026-06-01 10:11:47.065594
pkg:github/puppetlabs/puppet purl2cpe 2026-06-01 10:11:47.065596
pkg:rpm/fedora/puppet purl2cpe 2026-06-01 10:11:47.065597
pkg:rpm/opensuse/puppet purl2cpe 2026-06-01 10:11:47.065598

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2013-2274 vulnerable 2026-06-03 14:33:00.523793 Details available
Puppet 2.6.x before 2.6.18 and Puppet Enterprise 1.2.x before 1.2.7 allows remote authenticated users to execute arbitrary code on the puppet master, or an agent with puppet kick enabled, via a crafted request for a report.
Published: 2013-03-20T16:00:00.000Z
Updated: 2024-08-06T15:27:41.143Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.