CVE-2012-1054

CVE-2012-1054 describes a local privilege escalation vulnerability affecting Puppet 2.6.x before 2.6.14, 2.7.x before 2.7.11, and Puppet Enterprise versions when managing k5login files. An attacker could exploit this by creating a symlink to the .k5login file, allowing them to gain elevated privileges on the system. The vulnerability has a CVSS score of 4.4, indicating a medium severity due to requiring local access and moderate attack complexity, potentially leading to partial confidentiality, integrity, and availability compromise. There is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.