Security Advisory
CVE-2017-10689
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
In previous versions of Puppet Agent it was possible to install a module with world writable permissions. Puppet Agent 5.3.4 and 1.10.10 included a fix to this vulnerability.