{"id":"CVE-2013-2275","state":"PUBLISHED","title":"The default configuration for puppet masters 0.25.0 and later in Puppet before 2.6.18, 2.7.x before 2.7.21, and 3.1.x before 3.1.1, and Puppet Enterprise before 1.2.7 and 2.7.x bef","description":"The default configuration for puppet masters 0.25.0 and later in Puppet before 2.6.18, 2.7.x before 2.7.21, and 3.1.x before 3.1.1, and Puppet Enterprise before 1.2.7 and 2.7.x before 2.7.2, allows remote authenticated nodes to submit reports for other nodes via unspecified vectors.","publishedAt":"2013-03-20T16:00:00.000Z","updatedAt":"2024-08-06T15:27:41.177Z","severity":null,"assigner":"mitre","products":["n/a n/a"],"affected":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}],"references":["http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00004.html","http://rhn.redhat.com/errata/RHSA-2013-0710.html","http://www.debian.org/security/2013/dsa-2643","https://puppetlabs.com/security/cve/cve-2013-2275/","http://secunia.com/advisories/52596","http://ubuntu.com/usn/usn-1759-1","http://lists.opensuse.org/opensuse-updates/2013-04/msg00056.html","http://www.securityfocus.com/bid/58449"],"weaknesses":[],"ingestedAt":"2026-10-29T19:40:43.773Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2013/2xxx/CVE-2013-2275.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2013-2275","state":"PUBLISHED","datePublished":"2013-03-20T16:00:00.000Z","dateUpdated":"2024-08-06T15:27:41.177Z","assignerShortName":"mitre","assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","dateReserved":"2013-02-26T00:00:00.000Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"The default configuration for puppet masters 0.25.0 and later in Puppet before 2.6.18, 2.7.x before 2.7.21, and 3.1.x before 3.1.1, and Puppet Enterprise before 1.2.7 and 2.7.x before 2.7.2, allows remote authenticated nodes to submit reports for other nodes via unspecified vectors."}],"affected":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00004.html","name":"SUSE-SU-2013:0618","tags":["vendor-advisory","x_refsource_SUSE"]},{"url":"http://rhn.redhat.com/errata/RHSA-2013-0710.html","name":"RHSA-2013:0710","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"http://www.debian.org/security/2013/dsa-2643","name":"DSA-2643","tags":["vendor-advisory","x_refsource_DEBIAN"]},{"url":"https://puppetlabs.com/security/cve/cve-2013-2275/","tags":["x_refsource_CONFIRM"]},{"url":"http://secunia.com/advisories/52596","name":"52596","tags":["third-party-advisory","x_refsource_SECUNIA"]},{"url":"http://ubuntu.com/usn/usn-1759-1","name":"USN-1759-1","tags":["vendor-advisory","x_refsource_UBUNTU"]},{"url":"http://lists.opensuse.org/opensuse-updates/2013-04/msg00056.html","name":"openSUSE-SU-2013:0641","tags":["vendor-advisory","x_refsource_SUSE"]},{"url":"http://www.securityfocus.com/bid/58449","name":"58449","tags":["vdb-entry","x_refsource_BID"]}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"shortName":"mitre","dateUpdated":"2013-04-11T09:00:00.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca"},"datePublic":"2013-03-12T00:00:00.000Z","x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2013-2275","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"The default configuration for puppet masters 0.25.0 and later in Puppet before 2.6.18, 2.7.x before 2.7.21, and 3.1.x before 3.1.1, and Puppet Enterprise before 1.2.7 and 2.7.x before 2.7.2, allows remote authenticated nodes to submit reports for other nodes via unspecified vectors."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"SUSE-SU-2013:0618","refsource":"SUSE","url":"http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00004.html"},{"name":"RHSA-2013:0710","refsource":"REDHAT","url":"http://rhn.redhat.com/errata/RHSA-2013-0710.html"},{"name":"DSA-2643","refsource":"DEBIAN","url":"http://www.debian.org/security/2013/dsa-2643"},{"name":"https://puppetlabs.com/security/cve/cve-2013-2275/","refsource":"CONFIRM","url":"https://puppetlabs.com/security/cve/cve-2013-2275/"},{"name":"52596","refsource":"SECUNIA","url":"http://secunia.com/advisories/52596"},{"name":"USN-1759-1","refsource":"UBUNTU","url":"http://ubuntu.com/usn/usn-1759-1"},{"name":"openSUSE-SU-2013:0641","refsource":"SUSE","url":"http://lists.opensuse.org/opensuse-updates/2013-04/msg00056.html"},{"name":"58449","refsource":"BID","url":"http://www.securityfocus.com/bid/58449"}]}}},"adp":[{"title":"CVE Program Container","references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00004.html","name":"SUSE-SU-2013:0618","tags":["vendor-advisory","x_refsource_SUSE","x_transferred"]},{"url":"http://rhn.redhat.com/errata/RHSA-2013-0710.html","name":"RHSA-2013:0710","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"http://www.debian.org/security/2013/dsa-2643","name":"DSA-2643","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred"]},{"url":"https://puppetlabs.com/security/cve/cve-2013-2275/","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://secunia.com/advisories/52596","name":"52596","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://ubuntu.com/usn/usn-1759-1","name":"USN-1759-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred"]},{"url":"http://lists.opensuse.org/opensuse-updates/2013-04/msg00056.html","name":"openSUSE-SU-2013:0641","tags":["vendor-advisory","x_refsource_SUSE","x_transferred"]},{"url":"http://www.securityfocus.com/bid/58449","name":"58449","tags":["vdb-entry","x_refsource_BID","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-06T15:27:41.177Z"}}]}}}