CVE-2016-2785

high-risk

Published 2016-06-10

Puppet Server before 2.3.2 and Ruby puppetmaster in Puppet 4.x before 4.4.2 and in Puppet Agent before 1.4.2 might allow remote attackers to bypass intended auth.conf access restrictions by leveraging incorrect URL decoding.

Do I need to act?

0.17% chance of exploitation

EPSS score — low exploit probability

Not on CISA KEV list

No confirmed active exploitation reported to CISA

Patch status unknown

Check vendor advisories for fix availability and mitigation guidance

CVSS 9.8/10 Critical

NETWORK / LOW complexity

Affected Products (20)

Puppet

Puppet Server

Puppet

Puppet Server

Affected Vendors

Puppet

References (6)

Vendor Advisory https://github.com/puppetlabs/puppet/pull/4921/commits/8d2ce797db265720f0a20d1d4...

Vendor Advisory https://puppet.com/security/cve/cve-2016-2785

Third Party Advisory https://security.gentoo.org/glsa/201606-02

Vendor Advisory https://github.com/puppetlabs/puppet/pull/4921/commits/8d2ce797db265720f0a20d1d4...

Vendor Advisory https://puppet.com/security/cve/cve-2016-2785

Third Party Advisory https://security.gentoo.org/glsa/201606-02

/ 100

high-risk

Severity 32/34 · Critical

Exploitability 1/34 · Minimal

Exposure 20/34 · Moderate