Puppet allows local users to modify the permissions of arbitrary files
Date: 2022-05
Affected: rubygems/puppet, rubygems/puppet
Attack vector: path-traversal
Category: vulnerability-disclosure
Severity: Medium
CVE: CVE-2011-3870
CWE: CWE-59

Puppet 2.7.x before 2.7.5, 2.6.x before 2.6.11, and 0.25.x allows local users to modify the permissions of arbitrary files via a symlink attack on the SSH authorized_keys file.


Mitigations:

Architectural layers (MAESTRO):