← All advisories

Critical severity9.8NVD Advisory· Published Jun 7, 2023· Updated Jun 17, 2026

CVE-2023-2530

CVE-2023-2530

Description

A privilege escalation allowing remote code execution was discovered in the orchestration service.

Affected products

5

Puppet (software)/Puppet Enterprise4 versions
cpe:2.3:a:puppet:puppet_enterprise:*:*:*:*:*:*:*:*+ 3 more
- cpe:2.3:a:puppet:puppet_enterprise:*:*:*:*:*:*:*:*range: >=2021.7.0,<=2021.7.3
- cpe:2.3:a:puppet:puppet_enterprise:2023.0:*:*:*:*:*:*:*
- cpe:2.3:a:puppet:puppet_enterprise:2023.1.0:*:*:*:*:*:*:*
- (no CPE)range: 2021.7.0
Puppet (software)/orchestration servicellm-create

Patches

Vulnerability mechanics

References

1

www.puppet.com/security/cve/cve-2023-2530-remote-code-execution-orchestratornvdVendor Advisory

News mentions

0

No linked articles in our index yet.