What is the CVSS score of CVE-2012-1988?

CVE-2012-1988 has a CVSS 2.0 base score of 6.0 (Medium). CVSS vector: AV:N/AC:M/Au:S/C:P/I:P/A:P. EPSS exploitation probability: 0.5%.

Is there a patch available for CVE-2012-1988?

Yes, a patch is available for CVE-2012-1988. Update the affected software to the latest version immediately.

Puppet CVE-2012-1988

MEDIUM

OS Command Injection (CWE-78)

2012-05-29 cve@mitre.org

Command Injection Debian Canonical Debian Linux Fedora Puppet Enterprise Ubuntu Linux Puppet Fedoraproject

6.0

CVSS 2.0 · NVD

View

Vulnerability Assessment

Weakness	CWE CWE-78 OWASP Top 10:2025 A05:2025 - Injection ASVS 5.0 V1 - Encoding and Sanitization OS command sanitization, avoid shell exec MITRE ATT&CK 2 techniques across 1 tactic: Execution The technique list with ATT&CK links and the kill-chain view is part of the Basic plan and up. Sign in to read
Impact	CVSS score of 6.0 (MEDIUM). Attack characteristics: network attack vector, M complexity. EPSS exploitation probability: 0.49%.
Exploit ScenarioDerived	A remote attacker could execute arbitrary operating system commands on the host by sending crafted requests to the affected application.

This Month Plan within 30 days. Why: MEDIUM severity (CVSS 4.0-6.9).

Patch available 0.5% exploitation probability (EPSS)

Get an e-mail when this CVE is exploited, patched or re-scored. Free account.

Alert me

AnalysisAI

Puppet 2.6.x before 2.6.15 and 2.7.x before 2.7.13, and Puppet Enterprise (PE) Users 1.0, 1.1, 1.2.x, 2.0.x, and 2.5.x before 2.5.1 allows remote authenticated users with agent SSL keys and. Rated medium severity (CVSS 6.0), this vulnerability is remotely exploitable. This OS Command Injection vulnerability could allow attackers to execute arbitrary operating system commands on the host.

RemediationAI

A vendor patch is available. Apply the latest security update as soon as possible. Avoid passing user input to shell commands. Use language-specific APIs instead of shell execution. Apply strict input validation with allowlists.

Affected Packages

rubygems puppet fix: 2.6.15, 2.7.13

Source: OSV (Open Source Vulnerabilities)

Affects your stack

Affects 1 package in rubygems

Checking this CVE against your own stacks and servers is part of the Basic plan and up.

Technical ContextAI · show details

This vulnerability is classified as OS Command Injection (CWE-78), which allows attackers to execute arbitrary operating system commands on the host. Puppet 2.6.x before 2.6.15 and 2.7.x before 2.7.13, and Puppet Enterprise (PE) Users 1.0, 1.1, 1.2.x, 2.0.x, and 2.5.x before 2.5.1 allows remote authenticated users with agent SSL keys and file-creation permissions on the puppet master to execute arbitrary commands by creating a file whose full pathname contains shell metacharacters, then performing a filebucket request. Affected products include: Puppet, Puppet Puppet Enterprise, Fedoraproject Fedora, Debian Debian Linux, Canonical Ubuntu Linux. Version information: before 2.6.15.

Know when Puppet gets its next vulnerability

Watch products and get an email when something new is published
Check this CVE against your own stack and servers
Exploit and PoC references, threat intelligence from 22 sources

Continue with Google Continue with GitHub

No credit card · 7-day full trial

Severity by source

NVD PRIMARY 6.0 MEDIUM

AV:N/AC:M/Au:S/C:P/I:P/A:P

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector

Network

Attack Complexity

Confidentiality

Integrity

Availability

DescriptionCVE.org

Puppet 2.6.x before 2.6.15 and 2.7.x before 2.7.13, and Puppet Enterprise (PE) Users 1.0, 1.1, 1.2.x, 2.0.x, and 2.5.x before 2.5.1 allows remote authenticated users with agent SSL keys and file-creation permissions on the puppet master to execute arbitrary commands by creating a file whose full pathname contains shell metacharacters, then performing a filebucket request.

Threat Intelligence Overview

EPSS Score

0.5%

Top 34% exploitable

Data Quality

3 sources

Confidence: Low

NVD

CVE.org

EPSS

How this decision was reached

The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.

SignalValue

Severity MEDIUM

CISA KEV No

Public POC No

EPSS 0.5%

Patch available Yes

Active threat No

Deciding rule

MEDIUM severity (CVSS 4.0-6.9)

What every action level means

Emergency Immediate action required. Criteria: CRITICAL + in CISA KEV (actively exploited) without patch, OR CRITICAL + EPSS > 30% without patch, OR CRITICAL + active threat signals without patch.

Act Now Prioritize within 24-48h. Criteria: in KEV with patch available, OR CRITICAL + public POC, OR HIGH + EPSS > 10%, OR CRITICAL + active threat, OR any CRITICAL severity.

This Week Schedule remediation this week. Criteria: HIGH severity (CVSS 7.0-8.9). Patch within normal change window.

This Month Plan within 30 days. Criteria: MEDIUM severity (CVSS 4.0-6.9), lower exploitation probability. Include in regular patch cycle.

Monitor Track and reassess. Criteria: LOW severity (CVSS 0.1-3.9), minimal exploitation risk. No immediate action needed.

SSVC AssessmentENISA

SSVC Decision· derived

Scheduled

Exploitation· derived

None

System Exposure· derived

Open

Automatable· derived

Human Impact· derived

Medium

Priority Score

Low Medium High Critical

KEV: 0

EPSS: 0

CVSS: +30

PoC: 0

Weaponized: 0

Threat intel: 0

Gov advisory: 0

Attack Technique

OS Command Injection CRITICAL

OS command injection occurs when an application passes unsanitized user input directly into system shell commands.

Affected Products (CPE)CVE.org

cpe:2.3:a:puppet:puppet:*:*:*:*:*:*:*:*

cpe:2.3:a:puppet:puppet_enterprise:*:*:*:*:*:*:*:*

cpe:2.3:a:puppet:puppet_enterprise:1.0:*:*:*:*:*:*:*

cpe:2.3:a:puppet:puppet_enterprise:1.1:*:*:*:*:*:*:*

cpe:2.3:o:fedoraproject:fedora:15:*:*:*:*:*:*:*

cpe:2.3:o:fedoraproject:fedora:16:*:*:*:*:*:*:*

cpe:2.3:o:fedoraproject:fedora:17:*:*:*:*:*:*:*

cpe:2.3:o:debian:debian_linux:6.0:*:*:*:*:*:*:*

cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:10.04:*:*:*:*:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:11.04:*:*:*:*:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:11.10:*:*:*:*:*:*:*

More in Puppet

View all

CVE-2017-7529 HIGH Act Now

7.5 Jul 13

Nginx versions since 0.5.6 up to and including 1.13.2 are vulnerable to integer overflow vulnerability in nginx range fi

CVE-2020-7943 HIGH This Week POC

7.5 Mar 11

Puppet Server and PuppetDB provide useful performance and debugging information via their metrics API endpoints. Rated h

CVE-2016-5715 MEDIUM This Month POC

6.1 Jan 12

Open redirect vulnerability in the Console in Puppet Enterprise 2015.x and 2016.x before 2016.4.0 allows remote attacker

CVE-2014-3248 MEDIUM This Month POC

6.2 Nov 16

Untrusted search path vulnerability in Puppet Enterprise 2.8 before 2.8.7, Puppet before 2.7.26 and 3.x before 3.6.2, Fa

CVE-2016-2788 CRITICAL Act Now

9.8 Feb 13

MCollective 2.7.0 and 2.8.x before 2.8.9, as used in Puppet Enterprise, allows remote attackers to execute arbitrary cod

CVE-2016-5713 CRITICAL Act Now

9.8 Dec 06

Versions of Puppet Agent prior to 1.6.0 included a version of the Puppet Execution Protocol (PXP) agent that passed envi

CVE-2016-2786 CRITICAL Act Now

9.8 Jun 10

The pxp-agent component in Puppet Enterprise 2015.3.x before 2015.3.3 and Puppet Agent 1.3.x before 1.3.6 does not prope

CVE-2015-7224 CRITICAL Act Now

9.8 Dec 21

puppetlabs-mysql 3.1.0 through 3.6.0 allow remote attackers to bypass authentication by leveraging creation of a databas

CVE-2016-2785 CRITICAL Act Now

9.8 Jun 10

Puppet Server before 2.3.2 and Ruby puppetmaster in Puppet 4.x before 4.4.2 and in Puppet Agent before 1.4.2 might allow

CVE-2023-5309 CRITICAL Act Now

9.8 Nov 07

Versions of Puppet Enterprise prior to 2021.7.6 and 2023.5 contain a flaw which results in broken session management for

CVE-2023-5214 CRITICAL Act Now

9.8 Oct 06

In Puppet Bolt versions prior to 3.27.4, a path to escalate privileges was identified. Rated critical severity (CVSS 9.8

CVE-2023-2530 CRITICAL Act Now

9.8 Jun 07

A privilege escalation allowing remote code execution was discovered in the orchestration service. Rated critical severi

Same weakness CWE-78 – OS Command Injection

View all

CVE-2019-15107 CRITICAL POC

9.8

CVE-2024-51378 CRITICAL POC

9.8

CVE-2014-6271 CRITICAL POC

9.8

CVE-2018-11138 CRITICAL POC

9.8

CVE-2014-6278 HIGH POC

8.8

CVE-2020-9054 CRITICAL POC

9.8

CVE-2017-6334 HIGH POC

8.8

CVE-2024-50603 CRITICAL POC

10.0

Same technique Command Injection

View all

CVE-2024-21887 CRITICAL POC

9.1

CVE-2016-3081 HIGH POC

8.1

CVE-2012-1823 CRITICAL POC

9.8

CVE-2016-1555 CRITICAL POC

9.8

CVE-2024-55956 CRITICAL POC

9.8

References

Advisories & patches

ADVISORY http://projects.puppetlabs.com/issues/13518 ADVISORY http://puppetlabs.com/security/cve/cve-2012-1988/ ADVISORY http://secunia.com/advisories/48743 ADVISORY http://secunia.com/advisories/48748 ADVISORY http://secunia.com/advisories/48789 ADVISORY http://secunia.com/advisories/49136 REF http://lists.fedoraproject.org/pipermail/package-announce/2012-April/079227.html REF http://lists.fedoraproject.org/pipermail/package-announce/2012-April/079289.html REF http://lists.fedoraproject.org/pipermail/package-announce/2012-May/080003.html REF http://projects.puppetlabs.com/projects/1/wiki/Release_Notes#2.6.15 REF http://ubuntu.com/usn/usn-1419-1 REF http://www.debian.org/security/2012/dsa-2451 REF http://www.osvdb.org/81309 REF http://www.securityfocus.com/bid/52975 REF https://exchange.xforce.ibmcloud.com/vulnerabilities/74796 REF https://hermes.opensuse.org/messages/14523305 REF https://hermes.opensuse.org/messages/15087408

Search Externally

GitHub PoC

Exploit-DB PacketStorm Snyk Rapid7 Nuclei Templates Trickest PoC

Back