Read the docs
TI-2013-01453 Aliases CVE-2013-1652GHSA-3rpq-2xpx-53c4

Puppet before 2.6.18, 2.7.x before 2.7.21, and 3.1.x before 3.1.1, and Puppet Enterprise…

Priority LOW 26CWE-264Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Medium
Impact type
Security bypass
Confidentiality · integrity · availability
Partial · Partial · None
Fix status
Partial Red Hat: 1 fixed, 1 without a fix

Attack profile from CVSS 2.0 · NVD. Fix status from CNA and Red Hat. Impact type from CWE-264.

Summary

Puppet before 2.6.18, 2.7.x before 2.7.21, and 3.1.x before 3.1.1, and Puppet Enterprise before 1.2.7 and 2.7.x before 2.7.2 allows remote authenticated users with a valid certificate and private key to read arbitrary catalogs or poison the master's cache via unspecified vectors.

Why it matters now

EPSS 0.01859 79th percentileScored 2026-11-07
Fix Partial Red Hat: 1 advisoryRed Hat: 1 fixed, 1 without a fix

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 29

CPEVersionsRoleVendor
cpe:2.3:a:puppetlabs:puppet:*:*:*:*:*:*:*:*up to 2.6.17VulnerablePuppetlabs
cpe:2.3:a:puppet:puppet:2.7.2:*:*:*:*:*:*:*2.7.2VulnerablePuppet
cpe:2.3:a:puppet:puppet:2.7.3:*:*:*:*:*:*:*2.7.3VulnerablePuppet
cpe:2.3:a:puppet:puppet:2.7.4:*:*:*:*:*:*:*2.7.4VulnerablePuppet
cpe:2.3:a:puppet:puppet:2.7.5:*:*:*:*:*:*:*2.7.5VulnerablePuppet
cpe:2.3:a:puppet:puppet:2.7.6:*:*:*:*:*:*:*2.7.6VulnerablePuppet
cpe:2.3:a:puppet:puppet:2.7.7:*:*:*:*:*:*:*2.7.7VulnerablePuppet
cpe:2.3:a:puppet:puppet:2.7.8:*:*:*:*:*:*:*2.7.8VulnerablePuppet
cpe:2.3:a:puppet:puppet:2.7.9:*:*:*:*:*:*:*2.7.9VulnerablePuppet
cpe:2.3:a:puppet:puppet:2.7.10:*:*:*:*:*:*:*2.7.10VulnerablePuppet
  • cpe:2.3:a:puppetlabs:puppet:*:*:*:*:*:*:*:* Versions up to 2.6.17 Vulnerable ·Puppetlabs
  • cpe:2.3:a:puppet:puppet:2.7.2:*:*:*:*:*:*:* Versions 2.7.2 Vulnerable ·Puppet
  • cpe:2.3:a:puppet:puppet:2.7.3:*:*:*:*:*:*:* Versions 2.7.3 Vulnerable ·Puppet
  • cpe:2.3:a:puppet:puppet:2.7.4:*:*:*:*:*:*:* Versions 2.7.4 Vulnerable ·Puppet
  • cpe:2.3:a:puppet:puppet:2.7.5:*:*:*:*:*:*:* Versions 2.7.5 Vulnerable ·Puppet
  • cpe:2.3:a:puppet:puppet:2.7.6:*:*:*:*:*:*:* Versions 2.7.6 Vulnerable ·Puppet
  • cpe:2.3:a:puppet:puppet:2.7.7:*:*:*:*:*:*:* Versions 2.7.7 Vulnerable ·Puppet
  • cpe:2.3:a:puppet:puppet:2.7.8:*:*:*:*:*:*:* Versions 2.7.8 Vulnerable ·Puppet
  • cpe:2.3:a:puppet:puppet:2.7.9:*:*:*:*:*:*:* Versions 2.7.9 Vulnerable ·Puppet
  • cpe:2.3:a:puppet:puppet:2.7.10:*:*:*:*:*:*:* Versions 2.7.10 Vulnerable ·Puppet
Show 19 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:puppet:puppet:2.7.11:*:*:*:*:*:*:*2.7.11VulnerablePuppet
cpe:2.3:a:puppet:puppet:2.7.12:*:*:*:*:*:*:*2.7.12VulnerablePuppet
cpe:2.3:a:puppet:puppet:2.7.13:*:*:*:*:*:*:*2.7.13VulnerablePuppet
cpe:2.3:a:puppet:puppet:2.7.14:*:*:*:*:*:*:*2.7.14VulnerablePuppet
cpe:2.3:a:puppet:puppet:2.7.16:*:*:*:*:*:*:*2.7.16VulnerablePuppet
cpe:2.3:a:puppet:puppet:2.7.17:*:*:*:*:*:*:*2.7.17VulnerablePuppet
cpe:2.3:a:puppet:puppet:2.7.18:*:*:*:*:*:*:*2.7.18VulnerablePuppet
cpe:2.3:a:puppetlabs:puppet:2.7.0:*:*:*:*:*:*:*2.7.0VulnerablePuppetlabs
cpe:2.3:a:puppetlabs:puppet:2.7.1:*:*:*:*:*:*:*2.7.1VulnerablePuppetlabs
cpe:2.3:a:puppetlabs:puppet:2.7.19:*:*:*:*:*:*:*2.7.19VulnerablePuppetlabs
cpe:2.3:a:puppetlabs:puppet:2.7.20:*:*:*:*:*:*:*2.7.20VulnerablePuppetlabs
cpe:2.3:a:puppetlabs:puppet:2.7.20:rc1:*:*:*:*:*:*2.7.20 rc1VulnerablePuppetlabs
cpe:2.3:a:puppet:puppet_enterprise:3.1.0:*:*:*:*:*:*:*3.1.0VulnerablePuppet
cpe:2.3:a:puppetlabs:puppet:*:*:*:*:enterprise:*:*:*up to 1.2.6VulnerablePuppetlabs
cpe:2.3:a:puppet:puppet_enterprise:2.7.0:*:*:*:*:*:*:*2.7.0VulnerablePuppet
cpe:2.3:a:puppet:puppet_enterprise:2.7.1:*:*:*:*:*:*:*2.7.1VulnerablePuppet
cpe:2.3:o:canonical:ubuntu_linux:11.10:*:*:*:*:*:*:*11.10VulnerableCanonical
cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*12.04VulnerableCanonical
cpe:2.3:o:canonical:ubuntu_linux:12.10:*:*:*:*:*:*:*12.10VulnerableCanonical
  • cpe:2.3:a:puppet:puppet:2.7.11:*:*:*:*:*:*:* Versions 2.7.11 Vulnerable ·Puppet
  • cpe:2.3:a:puppet:puppet:2.7.12:*:*:*:*:*:*:* Versions 2.7.12 Vulnerable ·Puppet
  • cpe:2.3:a:puppet:puppet:2.7.13:*:*:*:*:*:*:* Versions 2.7.13 Vulnerable ·Puppet
  • cpe:2.3:a:puppet:puppet:2.7.14:*:*:*:*:*:*:* Versions 2.7.14 Vulnerable ·Puppet
  • cpe:2.3:a:puppet:puppet:2.7.16:*:*:*:*:*:*:* Versions 2.7.16 Vulnerable ·Puppet
  • cpe:2.3:a:puppet:puppet:2.7.17:*:*:*:*:*:*:* Versions 2.7.17 Vulnerable ·Puppet
  • cpe:2.3:a:puppet:puppet:2.7.18:*:*:*:*:*:*:* Versions 2.7.18 Vulnerable ·Puppet
  • cpe:2.3:a:puppetlabs:puppet:2.7.0:*:*:*:*:*:*:* Versions 2.7.0 Vulnerable ·Puppetlabs
  • cpe:2.3:a:puppetlabs:puppet:2.7.1:*:*:*:*:*:*:* Versions 2.7.1 Vulnerable ·Puppetlabs
  • cpe:2.3:a:puppetlabs:puppet:2.7.19:*:*:*:*:*:*:* Versions 2.7.19 Vulnerable ·Puppetlabs
  • cpe:2.3:a:puppetlabs:puppet:2.7.20:*:*:*:*:*:*:* Versions 2.7.20 Vulnerable ·Puppetlabs
  • cpe:2.3:a:puppetlabs:puppet:2.7.20:rc1:*:*:*:*:*:* Versions 2.7.20 rc1 Vulnerable ·Puppetlabs
  • cpe:2.3:a:puppet:puppet_enterprise:3.1.0:*:*:*:*:*:*:* Versions 3.1.0 Vulnerable ·Puppet
  • cpe:2.3:a:puppetlabs:puppet:*:*:*:*:enterprise:*:*:* Versions up to 1.2.6 Vulnerable ·Puppetlabs
  • cpe:2.3:a:puppet:puppet_enterprise:2.7.0:*:*:*:*:*:*:* Versions 2.7.0 Vulnerable ·Puppet
  • cpe:2.3:a:puppet:puppet_enterprise:2.7.1:*:*:*:*:*:*:* Versions 2.7.1 Vulnerable ·Puppet
  • cpe:2.3:o:canonical:ubuntu_linux:11.10:*:*:*:*:*:*:* Versions 11.10 Vulnerable ·Canonical
  • cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:* Versions 12.04 Vulnerable ·Canonical
  • cpe:2.3:o:canonical:ubuntu_linux:12.10:*:*:*:*:*:*:* Versions 12.10 Vulnerable ·Canonical

Remediation

Red Hat 1 advisory

  • RHSA-2013:0710 Released 2013-04-04 · Red Hat rating Important
    puppet security update
    • OpenStack Folsom puppet-2.6.18-1.el6ost, puppet-server-2.6.18-1.el6ost

Vendor assessments

Red Hat

Red Hat rating: Moderate. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat Subscription Asset ManagerAffectedNo fix yet
OpenStack FolsomFixed RHSA-2013:0710

Timeline

  1. 2026-10-02 Threatist record created from CVE-2013-1652
  2. 2026-10-03 Alias added: GHSA-3rpq-2xpx-53c4

References

Advisory 6

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences