CVE-2012-1988
Puppet 2.6.x before 2.6.15 and 2.7.x before 2.7.13, and Puppet Enterprise (PE) Users 1.0, 1.1, 1.2.x, 2.0.x, and 2.5.x before 2.5.1 allows remote authenticated users with agent SSL keys and file-creation permissions on the puppet master to execute arbitrary commands by creating a file whose full pathname contains shell metacharacters, then performing a filebucket request.
Key facts
- CVSS score
- 6.0 (v2.0)
- Severity
- MEDIUM
- CVSS vector
AV:N/AC:M/Au:S/C:P/I:P/A:P- Weakness (CWE)
- CWE-78
- EPSS score
- 2.6% (85th percentile)
- In CISA KEV
- No
- In EU EUVD
- Yes (EUVD-2022-2885)
- Published
- May 29, 2012
- NVD last modified
- June 16, 2026
- Status
- Modified
EU Vulnerability Database (EUVD)
This vulnerability is also tracked by ENISA as EUVD-2022-2885 in the EU Vulnerability Database. Last updated in EUVD on August 6, 2024.
View on the EU Vulnerability DatabaseAffected products
- canonical / ubuntu linux
- canonical / ubuntu linux
- canonical / ubuntu linux
- debian / debian linux
- debian / debian linux
- fedoraproject / fedora
- fedoraproject / fedora
- fedoraproject / fedora
- puppet / puppet
- puppet / puppet enterprise
- puppet / puppet enterprise
- puppet / puppet enterprise
References
- http://lists.fedoraproject.org/pipermail/package-announce/2012-April/079227.html(Mailing List, Third Party Advisory)
- http://lists.fedoraproject.org/pipermail/package-announce/2012-April/079289.html(Mailing List, Third Party Advisory)
- http://lists.fedoraproject.org/pipermail/package-announce/2012-May/080003.html(Mailing List, Third Party Advisory)
- http://projects.puppetlabs.com/issues/13518(Broken Link, Vendor Advisory)
- http://projects.puppetlabs.com/projects/1/wiki/Release_Notes#2.6.15(Broken Link)
- http://puppetlabs.com/security/cve/cve-2012-1988/(Broken Link, Vendor Advisory)
- http://secunia.com/advisories/48743(Broken Link, Vendor Advisory)
- http://secunia.com/advisories/48748(Broken Link, Vendor Advisory)
- http://secunia.com/advisories/48789(Broken Link, Vendor Advisory)
- http://secunia.com/advisories/49136(Broken Link, Vendor Advisory)
- http://ubuntu.com/usn/usn-1419-1(Third Party Advisory)
- http://www.debian.org/security/2012/dsa-2451(Third Party Advisory)
- http://www.osvdb.org/81309(Broken Link)
- http://www.securityfocus.com/bid/52975(Broken Link, Third Party Advisory, VDB Entry)
- https://exchange.xforce.ibmcloud.com/vulnerabilities/74796(Third Party Advisory, VDB Entry)
- https://hermes.opensuse.org/messages/14523305(Broken Link)
- https://hermes.opensuse.org/messages/15087408(Broken Link)
Last updated September 17, 2026 · Source: NVD, CISA KEV, FIRST.org EPSS
Query CVEs from your AI assistant
The CVE/NVD Explorer brain answers CVE questions directly inside Claude, ChatGPT, or any MCP assistant — always up to date, no setup. Add it once and stop pasting advisories into chat.
Add the CVE brain