CVE-2023-2530
published 2023-06-07CVE-2023-2530: A privilege escalation allowing remote code execution was discovered in the orchestration service.
PriorityP258critical9.8CVSS 3.1
AVNACLPRNUINSUCHIHAH
EPSS
1.11%
63.5th percentile
A privilege escalation allowing remote code execution was discovered in the orchestration service.
Affected
6 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | puppet | — | — |
| puppet | puppet_enterprise | — | — |
| puppet | puppet_enterprise | — | — |
| puppet | puppet_enterprise | >= 2021.7.0 < 2021.7.4 | 2021.7.4 |
| puppet | puppet_enterprise | 2021.7.0 – 2021.7.3 | — |
| puppet | puppet_enterprise | >= 2023.0.0 < 2023.2.0 | 2023.2.0 |
CVSS provenance
nvdv3.19.8CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
vendor_debian9.8LOW
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-m7x4-fm9r-7wj8: A privilege escalation allowing remote code execution was discovered in the orchestration service
ghsa_unreviewed·2023-06-07
CVE-2023-2530 [CRITICAL] CWE-276 GHSA-m7x4-fm9r-7wj8: A privilege escalation allowing remote code execution was discovered in the orchestration service
A privilege escalation allowing remote code execution was discovered in the orchestration service.
Debian
CVE-2023-2530: puppet - A privilege escalation allowing remote code execution was discovered in the orch...
vendor_debian·2023·CVSS 9.8
CVE-2023-2530 [CRITICAL] CVE-2023-2530: puppet - A privilege escalation allowing remote code execution was discovered in the orch...
A privilege escalation allowing remote code execution was discovered in the orchestration service.
Scope: local
bullseye: resolved
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2023-06-07
Published