GHSA-77hg-g8cc-5r37

Source

https://github.com/advisories/GHSA-77hg-g8cc-5r37

Import Source

https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-77hg-g8cc-5r37/GHSA-77hg-g8cc-5r37.json

JSON Data

https://api.osv.dev/v1/vulns/GHSA-77hg-g8cc-5r37

Aliases

CVE-2012-1053

Published

2022-05-14T00:56:44Z

Modified

2024-11-28T05:39:04.125231Z

Summary

Puppet Privilege Escallation

Details

The changeuser method in the SUIDManager (lib/puppet/util/suidmanager.rb) in Puppet 2.6.x before 2.6.14 and 2.7.x before 2.7.11, and Puppet Enterprise (PE) Users 1.0, 1.1, 1.2.x, 2.0.x before 2.0.3 does not properly manage group privileges, which allows local users to gain privileges via vectors related to (1) the changeuser not dropping supplementary groups in certain conditions, (2) changes to the eguid without associated changes to the egid, or (3) the addition of the real gid to supplementary groups.

Database specific

{
    "nvd_published_at": "2012-05-29T20:55:00Z",
    "cwe_ids": [
        "CWE-269"
    ],
    "severity": "MODERATE",
    "github_reviewed": true,
    "github_reviewed_at": "2023-08-29T21:12:37Z"
}

References

Affected packages

RubyGems / puppet

Package

Name: puppet
Purl: pkg:gem/puppet

Affected ranges

Type: ECOSYSTEM
Events: Introduced

2.6

Fixed

2.6.14

Affected versions

2.*

2.6.0

2.6.1

2.6.2

2.6.3

2.6.4

2.6.5

2.6.6

2.6.7

2.6.8

2.6.9

2.6.10

2.6.11

2.6.12

2.6.13

RubyGems / puppet

Package

Name: puppet
Purl: pkg:gem/puppet

Affected ranges

Type: ECOSYSTEM
Events: Introduced

2.7

Fixed

2.7.11

Affected versions

2.*

2.7.1

2.7.3

2.7.4

2.7.5

2.7.6

2.7.8

2.7.9