What’s Vulnerable › Vulnerabilities

CVE-2017-2298

• Severity: medium (CVSS 6.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2017-06-30 · updated 2026-06-17
• Weakness: CWE-20

Description

The mcollective-sshkey-security plugin before 0.5.1 for Puppet uses a server-specified identifier as part of a path where a file is written. A compromised server could use this to write a file to an arbitrary location on the client with the filename appended with the string "_pub.pem".

Affected products

• Puppet mcollective: through 0.5.0

References

• https://github.com/puppetlabs/mcollective-sshkey-security/blob/0.5.1/CHANGELOG.md
• https://github.com/puppetlabs/mcollective-sshkey-security/commit/3388a3109f4fb1c69fa8505e991bf59ca20d19a2
• https://puppet.com/security/cve/cve-2017-2298
• https://github.com/puppetlabs/mcollective-sshkey-security/blob/0.5.1/CHANGELOG.md
• https://github.com/puppetlabs/mcollective-sshkey-security/commit/3388a3109f4fb1c69fa8505e991bf59ca20d19a2
• https://puppet.com/security/cve/cve-2017-2298

Get alerted when CVE-2017-2298 or the next vulnerability affects your stack