CVE-2017-10690

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

In previous versions of Puppet Agent it was possible for the agent to retrieve facts from an environment that it was not classified to retrieve from. This was resolved in Puppet Agent 5.3.4, included in Puppet Enterprise 2017.3.4

Metrics

CVSS 3.0 6.5/10CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-269

Affected software

No affected versions have been published.

Timeline

Published
Feb 9, 2018
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2017

CVE-2017-106999.8avcodec 2.2.x, as used in VideoLAN VLC media player 2.2.7-x before 2017-06-29, allows out-of-bounds heap memory write due to calling memcpy(CVE-2017-107009.8In the medialibrary component in QNAP NAS 4.3.3.0229, an un-authenticated, remote attacker can execute arbitrary system commands as the rootCVE-2017-107016.1Cross site scripting (XSS) vulnerability in SAP Enterprise Portal 7.50 allows remote attackers to inject arbitrary web script or HTML, aka SCVE-2017-107066.2When Antiy Antivirus Engine before 5.0.0.05171547 scans a special ZIP archive, it crashes with a stack-based buffer overflow because a fixedCVE-2017-107087.8An issue was discovered in Apport through 2.20.x. In apport/report.py, Apport sets the ExecutablePath field and it then uses the path to runCVE-2017-107096.8The lockscreen on Elephone P9000 devices (running Android 6.0) allows physically proximate attackers to bypass a wrong-PIN lockout feature bCVE-2017-107116.1In SimpleRisk 20170614-001, a CSRF attack on reset.php (aka the Send Password Reset Email form) can insert XSS sequences via the user parameCVE-2017-107186.5Recently it was discovered as a part of the research on IoT devices in the most recent firmware for Shekar Endoscope that any malicious userCVE-2017-107196.5Recently it was discovered as a part of the research on IoT devices in the most recent firmware for Shekar Endoscope that the device has defCVE-2017-107207.8Recently it was discovered as a part of the research on IoT devices in the most recent firmware for Shekar Endoscope that the desktop applicCVE-2017-107216.5Recently it was discovered as a part of the research on IoT devices in the most recent firmware for Shekar Endoscope that the device has TelCVE-2017-107227.8Recently it was discovered as a part of the research on IoT devices in the most recent firmware for Shekar Endoscope that the desktop applic
CVE-2017-10690: Medium severity, CVSS 6.5 | Vulnix