AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2012-1988

MEDIUM · CVSS 6 EPSS 2.63%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2012-05-29 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE
CVE-2012-1988
Severity
MEDIUM
CVSS
6
EPSS
2.63%

Original NVD Description

Puppet 2.6.x before 2.6.15 and 2.7.x before 2.7.13, and Puppet Enterprise (PE) Users 1.0, 1.1, 1.2.x, 2.0.x, and 2.5.x before 2.5.1 allows remote authenticated users with agent SSL keys and file-creation permissions on the puppet master to execute arbitrary commands by creating a file whose full pathname contains shell metacharacters, then performing a filebucket request.