Vulnerability Database

315,293

Total vulnerabilities in the database

CVE-2018-6508

Puppet Enterprise 2017.3.x prior to 2017.3.3 are vulnerable to a remote execution bug when a specially crafted string was passed into the facter_task or puppet_conf tasks. This vulnerability only affects tasks in the affected modules, if you are not using puppet tasks you are not affected by this vulnerability.

  • Published: Feb 9, 2018
  • Updated: Nov 9, 2025
  • CVE: CVE-2018-6508
  • Severity: Medium
  • Exploit:

CVSS v2:

  • Severity: Medium
  • Score: 6
  • AV:N/AC:M/Au:S/C:P/I:P/A:P

CWEs:

Software From Fixed in
puppet / puppet_enterprise 2017.3.0 2017.3.2.x