Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Puppet 2.6.x before 2.6.15 and 2.7.x before 2.7.13, and Puppet Enterprise (PE) Users 1.0, 1.1, 1.2.x, 2.0.x, and 2.5.x before 2.5.1 uses predictable file names when installing Mac OS X packages from a remote source, which allows local users to overwrite arbitrary files or install arbitrary packages via a symlink attack on a temporary file in /tmp.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Puppet和Puppet Enterprise 权限许可和访问控制问题
Vulnerability Description
Puppet 2.6.15之前的2.6.x版本和2.7.13之前的2.7.x版本，Puppet Enterprise （PE） Users 1.0版本、1.1版本、1.2.x版本、2.0.x版本与2.5.1之前的2.5.x版本中存在漏洞，该漏洞源于从远程数据源安装Mac OS X包时使用了可预见的文件名。本地用户可利用该漏洞借助/tmp中的临时文件的符号链接攻击重写任意文件，或者安装任意包。
CVSS Information
N/A
Vulnerability Type
N/A