description: In previous versions of Puppet Agent it was possible to install a module with world writable permissions. Puppet Agent 5.3.4 and 1.10.10 included a fix to this vulnerability.
problem types: Incorrect Permission Handling
affected:
{
product: Puppet Enterprise
vendor: Puppet
versions:
status: affected, version: prior to 2016.4.10 or 2017.3.4
}
{
product: Puppet Agent
vendor: Puppet
versions:
status: affected, version: prior to 5.3.4 or 1.10.10
}
