VYPR
← All advisories
High severity7.8NVD Advisory· Published Jun 11, 2018· Updated Jun 17, 2026

CVE-2018-6515

CVE-2018-6515

Description

Puppet Agent 1.10.x prior to 1.10.13, Puppet Agent 5.3.x prior to 5.3.7, and Puppet Agent 5.5.x prior to 5.5.2 on Windows only, with a specially crafted configuration file an attacker could get pxp-agent to load arbitrary code with privilege escalation.

Affected products

2
  • Puppet (software)/Puppet Agentllm-fuzzy2 versions
    >=1.10.0, <1.10.13 || >=5.3.0, <5.3.7 || >=5.5.0, <5.5.2+ 1 more
    • (no CPE)range: >=1.10.0, <1.10.13 || >=5.3.0, <5.3.7 || >=5.5.0, <5.5.2
    • (no CPE)range: Puppet Agent 1.10.x prior to 1.10.13, Puppet Agent 5.3.x prior to 5.3.7, Puppet Agent 5.5.x prior to 5.5.2

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.