CVE-2016-2786

CRITICAL

Puppet Agent < 1.3.6 and Puppet Enterprise < 2015.3.3 - Remote Code Execution via Spoofed Broker Certificate

Title source: llm
STIX 2.1

Description

The pxp-agent component in Puppet Enterprise 2015.3.x before 2015.3.3 and Puppet Agent 1.3.x before 1.3.6 does not properly validate server certificates, which might allow remote attackers to spoof brokers and execute arbitrary commands via a crafted certificate.

References (2)

Core 2
Core References
Vendor Advisory x_refsource_confirm
https://puppet.com/security/cve/CVE-2016-2786
Third Party Advisory vendor-advisory x_refsource_gentoo
https://security.gentoo.org/glsa/201606-02

Scores

CVSS v3 9.8
EPSS 0.0156
EPSS Percentile 72.3%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-20
Status published
Products (7)
puppet/puppet_agent 1.3.0
puppet/puppet_agent 1.3.1
puppet/puppet_agent 1.3.2
puppet/puppet_agent 1.3.4
puppet/puppet_agent 1.3.5
puppet/puppet_enterprise 2015.3.0
puppet/puppet_enterprise 2015.3.2
Published Jun 10, 2016
Tracked Since Feb 18, 2026