Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

puppet: information disclosure

Package(s):

puppet

CVE #(s):

CVE-2012-6120

Created:

April 5, 2013

Updated:

April 5, 2013

Description:

From the Red Hat advisory:

It was found that the /var/log/puppet directory was created world-readable. This could allow local users to obtain sensitive information from the Puppet log files.

Alerts:

Red Hat

RHSA-2013:0710-01

2013-04-04

(Log in to post comments)