CVE-2017-2290

On Windows installations of the mcollective-puppet-agent plugin, version 1.12.0, a non-administrator user can create an executable that will be executed with…

published March 3, 2017

CVSS
—
EPSS
1%
Percentile
68.4
In the wild
Unconfirmed
What it is

On Windows installations of the mcollective-puppet-agent plugin, version 1.12.0, a non-administrator user can create an executable that will be executed with administrator privileges on the next "mco puppet" run. Puppet Enterprise users are not affected. This is resolved in mcollective-puppet-agent 1.12.1.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01226 · 68.4th percentile
Published
2017-03-03T15:00Z
EPSS history
Timeline
  • 03 MAR 15:00Z
    On Windows installations of the mcollective-puppet-agent plugin, version 1.12.0, a non-administrator user can create an executable that will be executed with…
    cvelistv5