CVE-2016-2785
Estado: ModificadaCrítica (9.8)—
Puppet Server before 2.3.2 and Ruby puppetmaster in Puppet 4.x before 4.4.2 and in Puppet Agent before 1.4.2 might allow remote attackers to bypass intended auth.conf access restrictions by leveraging incorrect URL decoding.
CVSS
- Versión: 3.1
- Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Puntuación base: 9.8
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 2.89%
- Percentil entre todas las CVEs puntuadas: 86
- Fecha de la puntuación: 2/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (3)
CWE
- CWE-284
Referencias
- https://github.com/puppetlabs/puppet/pull/4921/commits/8d2ce797db265720f0a20d1d46ee2757b4e4f6b2
- https://puppet.com/security/cve/cve-2016-2785
- https://security.gentoo.org/glsa/201606-02
- https://github.com/puppetlabs/puppet/pull/4921/commits/8d2ce797db265720f0a20d1d46ee2757b4e4f6b2
- https://puppet.com/security/cve/cve-2016-2785
- https://security.gentoo.org/glsa/201606-02
JSON original (NVD)
Mostrar
{
"id": "CVE-2016-2785",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 7.5,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"authentication": "NONE",
"integrityImpact": "PARTIAL",
"accessComplexity": "LOW",
"availabilityImpact": "PARTIAL",
"confidentialityImpact": "PARTIAL"
},
"acInsufInfo": false,
"impactScore": 6.4,
"baseSeverity": "HIGH",
"obtainAllPrivilege": false,
"exploitabilityScore": 10,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
],
"cvssMetricV31": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.1",
"baseScore": 9.8,
"attackVector": "NETWORK",
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"integrityImpact": "HIGH",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "HIGH",
"privilegesRequired": "NONE",
"confidentialityImpact": "HIGH"
},
"impactScore": 5.9,
"exploitabilityScore": 3.9
}
]
},
"affected": [
{
"source": "cve@mitre.org",
"affectedData": [
{
"vendor": "n/a",
"product": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
]
}
],
"published": "2016-06-10T15:59:00.140",
"references": [
{
"url": "https://github.com/puppetlabs/puppet/pull/4921/commits/8d2ce797db265720f0a20d1d46ee2757b4e4f6b2",
"tags": [
"Vendor Advisory"
],
"source": "cve@mitre.org"
},
{
"url": "https://puppet.com/security/cve/cve-2016-2785",
"tags": [
"Vendor Advisory"
],
"source": "cve@mitre.org"
},
{
"url": "https://security.gentoo.org/glsa/201606-02",
"tags": [
"Third Party Advisory"
],
"source": "cve@mitre.org"
},
{
"url": "https://github.com/puppetlabs/puppet/pull/4921/commits/8d2ce797db265720f0a20d1d46ee2757b4e4f6b2",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://puppet.com/security/cve/cve-2016-2785",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://security.gentoo.org/glsa/201606-02",
"tags": [
"Third Party Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "CWE-284"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Puppet Server before 2.3.2 and Ruby puppetmaster in Puppet 4.x before 4.4.2 and in Puppet Agent before 1.4.2 might allow remote attackers to bypass intended auth.conf access restrictions by leveraging incorrect URL decoding."
},
{
"lang": "es",
"value": "Puppet Server en versiones anteriores a 2.3.2 y Ruby puppetmaster en Puppet 4.x en versiones anteriores a 4.4.2 y en Puppet Agent en versiones anteriores a 1.4.2 podría permitir a atacantes remotos eludir las restricciones destinas al acceso auth.conf aprovechando una decodificación URL incorrecta."
}
],
"lastModified": "2026-06-17T00:44:23.763",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:puppet:puppet:4.0.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A11509AE-D08C-46AE-8D47-20E74818CBE6"
},
{
"criteria": "cpe:2.3:a:puppet:puppet:4.0.0:rc1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CA7AF7F2-94E6-4878-927B-C21631C98552"
},
{
"criteria": "cpe:2.3:a:puppet:puppet:4.0.0:rc2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8FB7FA1B-B7F7-4969-80F9-6A915B513187"
},
{
"criteria": "cpe:2.3:a:puppet:puppet:4.0.0:rc3:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "122339DA-E6C1-4F7A-8D41-28C254F3F7F4"
},
{
"criteria": "cpe:2.3:a:puppet:puppet:4.1.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "68A51928-A68D-4A73-B6D0-D5C1DDEC6458"
},
{
"criteria": "cpe:2.3:a:puppet:puppet:4.2.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4E88DAC8-E363-424D-8DEF-4471A0B8BCE7"
},
{
"criteria": "cpe:2.3:a:puppet:puppet:4.2.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "22C3FECF-C94E-4AE8-B461-BC3A3C31B723"
},
{
"criteria": "cpe:2.3:a:puppet:puppet:4.2.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F5B5CAF9-9CFF-4E16-94FA-3A30457F294F"
},
{
"criteria": "cpe:2.3:a:puppet:puppet:4.2.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C6C8611A-D412-4290-A549-63B927CE607E"
},
{
"criteria": "cpe:2.3:a:puppet:puppet:4.3.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9BE53A43-1311-4276-B6D3-A116EDD4596D"
},
{
"criteria": "cpe:2.3:a:puppet:puppet:4.3.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D88EB0D2-E1BE-4A96-BFE3-EC30F6F94DEA"
},
{
"criteria": "cpe:2.3:a:puppet:puppet:4.3.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "391B0EF3-C49C-4479-96BF-DAC83C4B7960"
},
{
"criteria": "cpe:2.3:a:puppet:puppet:4.4.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5E40E02A-C633-4EF1-964F-D58D6B69FF57"
},
{
"criteria": "cpe:2.3:a:puppet:puppet:4.4.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FE00E2D2-A880-4FAD-8514-68D92F45BB6E"
}
],
"operator": "OR"
}
]
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:puppet:puppet_server:2.0.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EC4D00D8-6A01-4BE0-BD10-EDBBB716C0B5"
},
{
"criteria": "cpe:2.3:a:puppet:puppet_server:2.1.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EEC046DE-8D52-475D-9FB8-833FCA324432"
},
{
"criteria": "cpe:2.3:a:puppet:puppet_server:2.1.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "508E4ED0-42DD-4886-BF38-E1B38A8A1535"
},
{
"criteria": "cpe:2.3:a:puppet:puppet_server:2.1.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F9B03168-8F2B-4E97-8CF6-ACCD6BD5E97A"
},
{
"criteria": "cpe:2.3:a:puppet:puppet_server:2.2.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2BC34CE8-8586-4763-AB70-8D6C7E64CF87"
},
{
"criteria": "cpe:2.3:a:puppet:puppet_server:2.3.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2D605861-8208-4051-8ABD-E6D6202BE243"
},
{
"criteria": "cpe:2.3:a:puppet:puppet_server:2.3.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5F392771-D087-4B17-9CEA-E599ECC08C38"
}
],
"operator": "OR"
}
]
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:puppet:puppet_agent:1.4.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D66C57AB-F8E2-4817-8912-1D7EB4EB63FC"
}
],
"operator": "OR"
}
]
}
],
"sourceIdentifier": "cve@mitre.org"
}