CVE-2012-3865

Puppet vulnerable to Path Traversal

3.5 LowFix available

CVE-2012-3865 is a low vulnerability (CVSS 3.5) in Puppet, published July 12, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.88%, the 79th percentile. Fixed in puppet 2.6.17.

What does this mean?

Severity: 3.5 LowCVSS 2.0, NVD
Exploit chance: 1.88%EPSS, 79th percentile
Exploitation: None knownNot on CISA’s or ENISA’s lists
Fixed in: 2.6.17puppet +5 more

Description

Directory traversal vulnerability in lib/puppet/reports/store.rb in Puppet before 2.6.17 and 2.7.x before 2.7.18, and Puppet Enterprise before 2.5.2, when Delete is enabled in auth.conf, allows remote authenticated users to delete arbitrary files on the puppet master server via a .. (dot dot) in a node name.

Exploit likelihood

1.88%Up 0.2 points since Feb 4, 2022

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`puppet` RubyGems	before 2.6.17	2.6.17
`puppet` RubyGems	2.7.0 up to 2.7.18	2.7.18
`puppet` Debian:11	before 2.7.18-1	2.7.18-1
`puppet` Debian:6.0 From an advisory covering 4 CVEs	before 2.6.2-5+squeeze6, plus listed versions 2.6.2-42.6.2-52.6.2-5+squeeze12.6.2-5+squeeze32.6.2-5+squeeze42.6.2-5+squeeze5	2.6.2-5+squeeze6
`puppet` RubyGems	before 2.6.17, plus listed versions 0.13.00.13.10.13.20.13.60.16.0 Show 39 moreShow less 0.18.40.22.40.23.00.23.10.23.20.24.00.24.10.24.20.24.30.24.40.24.50.24.60.24.70.24.80.24.90.25.00.25.10.25.20.25.30.25.40.25.50.9.22.6.02.6.12.6.102.6.112.6.122.6.132.6.142.6.152.6.162.6.22.6.32.6.42.6.52.6.62.6.72.6.82.6.9	2.6.17
`puppet` RubyGems	2.7.0 up to 2.7.18, plus listed versions 2.7.12.7.112.7.122.7.132.7.14 Show 8 moreShow less 2.7.162.7.172.7.32.7.42.7.52.7.62.7.82.7.9	2.7.18

What each source reports

NVD Score used3.5

Record: CVE-2012-3865
CVSS 2.0: 3.5 LowAV:N/AC:M/Au:S/C:N/I:N/A:P
Weakness: CWE-22
Updated: 2026-11-02

CVE ListNo score

Record: CVE-2012-3865
Updated: 2026-11-02

EUVDEUVD-2017-0235No score

Record: EUVD-2017-0235
Updated: 2026-11-03

GitHub AdvisoriesGHSA-g89m-3wjw-h857No score

Puppet vulnerable to Path Traversal

Directory traversal vulnerability in lib/puppet/reports/store.rb in Puppet before 2.6.17 and 2.7.x before 2.7.18, and Puppet Enterprise before 2.5.2, when Delete is enabled in auth.conf, allows remote authenticated users to delete arbitrary files on the puppet master server via a .. (dot dot) in a node name.

Record: GHSA-g89m-3wjw-h857
Weakness: CWE-22
Updated: 2026-11-02

OSVNo score