Beveiligingsadvies

CVE-2025-5459

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-06-26 06:30:56

Laatst bijgewerkt 2026-09-04 01:16:09

Toegewezen door Perforce

CVSS-score 8.6

Status PUBLISHED

Beschrijving

A user with specific node group editing permissions and a specially crafted class parameter could be used to execute commands as root on the primary host. It affects Puppet Enterprise versions 2018.1.8 through 2023.8.3 and 2025.3 and has been resolved in versions 2023.8.4 and 2025.4.0.

← Alle CVE's bekijken Bekijk op cve.org ↗