CVSS 3 Base Score:
Posted On:
Assessed Risk Level:
A bug in Puppet allows authenticated clients to delete arbitrary files on the puppet master.
Given a Puppet master with the "Delete" method allowed in auth.conf for an authenticated host, an attacker on that host can send a specially crafted Delete request that can cause an arbitrary file deletion on the Puppet master, potentially causing a denial of service attack. Note that this vulnerability does *not* exist in Puppet as configured by default; auth.conf must first be edited to enable deletion.