CVE-2012-6120

EPSS 0.10%

puppet - security update

Published: 4/10/2013Modified: 4/28/2026

Description

Red Hat OpenStack Essex and Folsom creates the /var/log/puppet directory with world-readable permissions, which allows local users to obtain sensitive information such as Puppet log files.

Affected packages (2)

Debian/puppetfrom 0, < 2.6.4-2
Debian/puppetfrom 0, < 2.6.2-5+squeeze10

References (1)

ADVISORYhttps://security-tracker.debian.org/tracker/CVE-2012-6120