CVE-2016-5716

—

CVSS 3.0

8.8 high

EPSS

2%p77

Published

Aug 9, 2017 (Aug 9, 2017)

Modified

Jun 17, 2026

Description

The console in Puppet Enterprise 2015.x and 2016.x prior to 2016.4.0 includes unsafe string reads that potentially allows for remote code execution on the console node.

Vendors: puppet
Products: puppet enterprise
Weakness: CWE-134
Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.8%)

In the news0 stories

No ingested article mentions this CVE yet.