CVE-2012-1906
Puppet 2.6.x before 2.6.15 and 2.7.x before 2.7.13, and Puppet Enterprise (PE) Users 1.0, 1.1, 1.2.x, 2.0.x, and 2.5.x before 2.5.1 uses predictable file names when installing Mac OS X packages from a remote source, which allows local users to overwrite arbitrary files or install arbitrary packages via a symlink attack on a temporary file in /tmp.
- EPSS
- 0.4% chance of exploitation in the next 30 days; higher than 28% of CVEs (scores of 2026-10-31)
- CWE
- CWE-264
- Published
- Modified
- Record from
- the NVD, synced
Affected
- puppet:puppet
- puppet:puppet_enterprise
- puppetlabs:puppet
- puppetlabs:puppet_enterprise_users
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-c4mc-49hq-q275 | RubyGems | puppet | >=2.6 <2.6.15 | 2.6.15 |
| GHSA-c4mc-49hq-q275 | RubyGems | puppet | >=2.7 <2.7.13 | 2.7.13 |