A bug in Puppet allows authenticated clients to delete arbitrary files on the puppet master.
Given a Puppet master with the "Delete" method allowed in auth.conf for an authenticated host, an attacker on that host can send a specially crafted Delete request that can cause an arbitrary file deletion on the Puppet master, potentially causing a denial of service attack. Note that this vulnerability does not exist in Puppet as configured by default; auth.conf must first be edited to enable deletion.