cnvd - cnvd-2018-04859

CNVD-2018-04859

Vulnerability from cnvd - Published: 2018-03-12

Title

Puppet Enterprise MCollective服务器安装任意包漏洞

Description

Puppet是美国Puppet实验室的一套基于客户端/服务器（C/S）架构的配置管理工具，它可用于管理配置文件、用户、cron任务、软件包、系统服务等。Puppet Enterprise是一个企业版。MCollective Server是其中的一个MCollective服务器。 Puppet Enterprise 2016.4.5之前版本和2017.2.1之前版本中的MCollective服务器存在安全漏洞。攻击者可利用该漏洞安装或删除代理上的任意包。

Severity

中

Patch Name

Puppet Enterprise MCollective服务器安装任意包漏洞的补丁

Patch Description

Formal description

目前厂商已发布升级补丁以修复漏洞，补丁获取链接： https://puppet.com/security/cve/cve-2017-2293

Reference

https://puppet.com/security/cve/cve-2017-2293

Impacted products

Name
['Puppet Labs Puppet Enterprise <2016.4.5', 'Puppet Labs Puppet Enterprise <2017.2.1']

Show details on source website

JSON

To clipboard

{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2017-2293"
    }
  },
  "description": "Puppet\u662f\u7f8e\u56fdPuppet\u5b9e\u9a8c\u5ba4\u7684\u4e00\u5957\u57fa\u4e8e\u5ba2\u6237\u7aef/\u670d\u52a1\u5668\uff08C/S\uff09\u67b6\u6784\u7684\u914d\u7f6e\u7ba1\u7406\u5de5\u5177\uff0c\u5b83\u53ef\u7528\u4e8e\u7ba1\u7406\u914d\u7f6e\u6587\u4ef6\u3001\u7528\u6237\u3001cron\u4efb\u52a1\u3001\u8f6f\u4ef6\u5305\u3001\u7cfb\u7edf\u670d\u52a1\u7b49\u3002Puppet Enterprise\u662f\u4e00\u4e2a\u4f01\u4e1a\u7248\u3002MCollective Server\u662f\u5176\u4e2d\u7684\u4e00\u4e2aMCollective\u670d\u52a1\u5668\u3002\r\n\r\nPuppet Enterprise 2016.4.5\u4e4b\u524d\u7248\u672c\u548c2017.2.1\u4e4b\u524d\u7248\u672c\u4e2d\u7684MCollective\u670d\u52a1\u5668\u5b58\u5728\u5b89\u5168\u6f0f\u6d1e\u3002\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u5b89\u88c5\u6216\u5220\u9664\u4ee3\u7406\u4e0a\u7684\u4efb\u610f\u5305\u3002",
  "discovererName": "Puppet Labs",
  "formalWay": "\u76ee\u524d\u5382\u5546\u5df2\u53d1\u5e03\u5347\u7ea7\u8865\u4e01\u4ee5\u4fee\u590d\u6f0f\u6d1e\uff0c\u8865\u4e01\u83b7\u53d6\u94fe\u63a5\uff1a\r\nhttps://puppet.com/security/cve/cve-2017-2293",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2018-04859",
  "openTime": "2018-03-12",
  "patchDescription": "Puppet\u662f\u7f8e\u56fdPuppet\u5b9e\u9a8c\u5ba4\u7684\u4e00\u5957\u57fa\u4e8e\u5ba2\u6237\u7aef/\u670d\u52a1\u5668\uff08C/S\uff09\u67b6\u6784\u7684\u914d\u7f6e\u7ba1\u7406\u5de5\u5177\uff0c\u5b83\u53ef\u7528\u4e8e\u7ba1\u7406\u914d\u7f6e\u6587\u4ef6\u3001\u7528\u6237\u3001cron\u4efb\u52a1\u3001\u8f6f\u4ef6\u5305\u3001\u7cfb\u7edf\u670d\u52a1\u7b49\u3002Puppet Enterprise\u662f\u4e00\u4e2a\u4f01\u4e1a\u7248\u3002MCollective Server\u662f\u5176\u4e2d\u7684\u4e00\u4e2aMCollective\u670d\u52a1\u5668\u3002\r\n\r\nPuppet Enterprise 2016.4.5\u4e4b\u524d\u7248\u672c\u548c2017.2.1\u4e4b\u524d\u7248\u672c\u4e2d\u7684MCollective\u670d\u52a1\u5668\u5b58\u5728\u5b89\u5168\u6f0f\u6d1e\u3002\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u5b89\u88c5\u6216\u5220\u9664\u4ee3\u7406\u4e0a\u7684\u4efb\u610f\u5305\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "Puppet Enterprise MCollective\u670d\u52a1\u5668\u5b89\u88c5\u4efb\u610f\u5305\u6f0f\u6d1e\u7684\u8865\u4e01",
  "products": {
    "product": [
      "Puppet Labs Puppet Enterprise \u003c2016.4.5",
      "Puppet Labs Puppet Enterprise \u003c2017.2.1"
    ]
  },
  "referenceLink": "https://puppet.com/security/cve/cve-2017-2293",
  "serverity": "\u4e2d",
  "submitTime": "2018-02-05",
  "title": "Puppet Enterprise MCollective\u670d\u52a1\u5668\u5b89\u88c5\u4efb\u610f\u5305\u6f0f\u6d1e"
}

CVE-2017-2293 (GCVE-0-2017-2293)

Vulnerability from cvelistv5 – Published: 2018-02-01 22:00 – Updated: 2024-09-16 17:33

Summary

Versions of Puppet Enterprise prior to 2016.4.5 or 2017.2.1 shipped with an MCollective configuration that allowed the package plugin to install or remove arbitrary packages on all managed agents. This release adds default configuration to not allow these actions. Customers who rely on this functionality can change this policy.

Severity ?

No CVSS data available.

CWE

Privilege Escalation

Assigner

puppet

References

URL

Tags

https://puppet.com/security/cve/cve-2017-2293

x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	Puppet	Puppet Enterprise	Affected: prior to 2016.4.5, 2016.5.x, 2017.1.x, resolved in 2016.4.5 and 2017.2.1

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T13:48:05.238Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://puppet.com/security/cve/cve-2017-2293"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Puppet Enterprise",
          "vendor": "Puppet",
          "versions": [
            {
              "status": "affected",
              "version": "prior to 2016.4.5, 2016.5.x, 2017.1.x, resolved in 2016.4.5 and 2017.2.1"
            }
          ]
        }
      ],
      "datePublic": "2018-02-01T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Versions of Puppet Enterprise prior to 2016.4.5 or 2017.2.1 shipped with an MCollective configuration that allowed the package plugin to install or remove arbitrary packages on all managed agents. This release adds default configuration to not allow these actions. Customers who rely on this functionality can change this policy."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Privilege Escalation",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-02-01T21:57:01",
        "orgId": "ca2a266c-be2f-4d4b-92d0-47b76b1a9c4e",
        "shortName": "puppet"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://puppet.com/security/cve/cve-2017-2293"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@puppet.com",
          "DATE_PUBLIC": "2018-02-01T00:00:00",
          "ID": "CVE-2017-2293",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Puppet Enterprise",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "prior to 2016.4.5, 2016.5.x, 2017.1.x, resolved in 2016.4.5 and 2017.2.1"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Puppet"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Versions of Puppet Enterprise prior to 2016.4.5 or 2017.2.1 shipped with an MCollective configuration that allowed the package plugin to install or remove arbitrary packages on all managed agents. This release adds default configuration to not allow these actions. Customers who rely on this functionality can change this policy."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Privilege Escalation"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://puppet.com/security/cve/cve-2017-2293",
              "refsource": "CONFIRM",
              "url": "https://puppet.com/security/cve/cve-2017-2293"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ca2a266c-be2f-4d4b-92d0-47b76b1a9c4e",
    "assignerShortName": "puppet",
    "cveId": "CVE-2017-2293",
    "datePublished": "2018-02-01T22:00:00Z",
    "dateReserved": "2016-12-01T00:00:00",
    "dateUpdated": "2024-09-16T17:33:31.679Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

CNVD-2018-04859

CVE-2017-2293 (GCVE-0-2017-2293)

Tags

Sightings

Nomenclature