CVE-2012-3864

Puppet before 2.6.17 and 2.7.x before 2.7.18, and Puppet Enterprise before 2.5.2, allows remote authenticated users to read arbitrary files on the puppet master server by leveraging an arbitrary user's certificate and private key in a GET request.

• CWE-200

• http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00006.html
• http://lists.opensuse.org/opensuse-updates/2012-07/msg00036.html
• http://puppetlabs.com/security/cve/cve-2012-3864/Vendor Advisory
• http://secunia.com/advisories/50014
• http://www.debian.org/security/2012/dsa-2511
• http://www.ubuntu.com/usn/USN-1506-1
• https://bugzilla.redhat.com/show_bug.cgi?id=839130
• https://github.com/puppetlabs/puppet/commit/10f6cb8969b4d5a933b333ecb01ce3696b1d57d4Exploit, Patch
• https://github.com/puppetlabs/puppet/commit/c3c7462e4066bf3a563987a402bf3ddf278bcd87Exploit, Patch
• http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00006.html
• http://lists.opensuse.org/opensuse-updates/2012-07/msg00036.html
• http://puppetlabs.com/security/cve/cve-2012-3864/Vendor Advisory
• http://secunia.com/advisories/50014
• http://www.debian.org/security/2012/dsa-2511
• http://www.ubuntu.com/usn/USN-1506-1
• https://bugzilla.redhat.com/show_bug.cgi?id=839130
• https://github.com/puppetlabs/puppet/commit/10f6cb8969b4d5a933b333ecb01ce3696b1d57d4Exploit, Patch
• https://github.com/puppetlabs/puppet/commit/c3c7462e4066bf3a563987a402bf3ddf278bcd87Exploit, Patch

Published

Aug 6, 2012

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2012-3845Buffer overflow in LAN Messenger 1.2.28 and earlier allows r…
• CVE-2012-3846Cross-site scripting (XSS) vulnerability in index.php in PHP…
• CVE-2012-3847slssvc.exe in Invensys Wonderware SuiteLink in Invensys InTo…
• CVE-2012-3848Multiple cross-site scripting (XSS) vulnerabilities in the w…
• CVE-2012-3859Unspecified vulnerability in the WebAdmin Portal in Netsweep…
• CVE-2012-3863channels/chan_sip.c in Asterisk Open Source 1.8.x before 1.8…
• CVE-2012-3865Directory traversal vulnerability in lib/puppet/reports/stor…
• CVE-2012-3866lib/puppet/defaults.rb in Puppet 2.7.x before 2.7.18, and Pu…
• CVE-2012-3867lib/puppet/ssl/certificate_authority.rb in Puppet before 2.6…
• CVE-2012-3868Race condition in the ns_client structure management in ISC …
• CVE-2012-3869Cross-site scripting (XSS) vulnerability in include/classes/…
• CVE-2012-3870Multiple cross-site scripting (XSS) vulnerabilities in objec…