Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2012-3865

15
FAUCET Score

CVE-2012-3865 is a directory traversal vulnerability affecting Puppet versions prior to 2.6.17 and 2.7.18, and Puppet Enterprise before 2.5.2. When Delete is enabled in auth.conf, authenticated remote attackers can delete arbitrary files on the Puppet master server by manipulating node names with dot-dot sequences. This vulnerability has a CVSS score of 3.5, indicating a medium attack complexity and partial impact on availability, but no impact on confidentiality or integrity. There is no known active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.

Impacted Technologies

VendorProductVersion(s)CPE
2.7.2CPE matchmatch criteria
cpe:2.3:a:puppet:puppet:2.7.2:*:*:*:*:*:*:*
2.7.3CPE matchmatch criteria
cpe:2.3:a:puppet:puppet:2.7.3:*:*:*:*:*:*:*
2.7.4CPE matchmatch criteria
cpe:2.3:a:puppet:puppet:2.7.4:*:*:*:*:*:*:*
2.7.5CPE matchmatch criteria
cpe:2.3:a:puppet:puppet:2.7.5:*:*:*:*:*:*:*
2.7.6CPE matchmatch criteria
cpe:2.3:a:puppet:puppet:2.7.6:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 2.0

3.5LOW

AV:N/AC:M/Au:S/C:N/I:N/A:P

Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
SINGLE
Exploitability Score
6.8
Impact Score
2.9
CvssVersion
2.0

Exploit Intelligence

EPSS Score
1.88%
Probability of exploitation in next 30 days
EPSS Percentile
77.3%
Percentile rank of EPSS score among Peer Group
As of 2026-07-27
Model: v2026.06.15
This CVE's current EPSS score of 0.0188 is in the 88th percentile among its peer group of 1,637 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (16)

github_advisorypatch availablevia nvd_reference
View patch
redhatpatch availablevia redhat_api
Product: CloudForms for RHEL 6Fixed in: rubygem-chunky_png-0:1.2.0-3.el6cf
View patch
redhatpatch availablevia redhat_api
Product: CloudForms for RHEL 6Fixed in: rubygem-ldap_fluff-0:0.1.3-1.el6_3
View patch
redhatpatch availablevia redhat_api
Product: CloudForms for RHEL 6Fixed in: rubygem-mail-0:2.3.0-3.el6cf
View patch
redhatpatch availablevia redhat_api
Product: CloudForms for RHEL 6Fixed in: rubygem-net-ldap-0:0.1.1-3.el6cf
View patch
redhatpatch availablevia redhat_api
Product: CloudForms for RHEL 6Fixed in: converge-ui-devel-0:1.0.4-1.el6cf
View patch
redhatpatch availablevia redhat_api
Product: CloudForms for RHEL 6Fixed in: puppet-0:2.6.17-2.el6cf
View patch
redhatpatch availablevia redhat_api
Product: CloudForms for RHEL 6Fixed in: rubygem-actionpack-1:3.0.10-10.el6cf
View patch
redhatpatch availablevia redhat_api
Product: CloudForms for RHEL 6Fixed in: rubygem-activerecord-1:3.0.10-6.el6cf
View patch
redhatpatch availablevia redhat_api
Product: CloudForms for RHEL 6Fixed in: rubygem-activesupport-1:3.0.10-4.el6cf
View patch
redhatpatch availablevia redhat_api
Product: CloudForms for RHEL 6Fixed in: rubygem-compass-0:0.11.5-2.el6cf
View patch
redhatpatch availablevia redhat_api
Product: CloudForms for RHEL 6Fixed in: rubygem-compass-960-plugin-0:0.10.4-2.el6cf
View patch
redhatpatch availablevia redhat_api
Product: CloudForms for RHEL 6Fixed in: rubygem-delayed_job-0:2.1.4-2.el6cf
View patch
rubygemspatch availablevia ghsa
Product: puppetFixed in: 2.7.18
rubygemspatch availablevia ghsa
Product: puppetFixed in: 2.6.17
redhatend of lifevia redhat_api
Product: Red Hat Enterprise MRG 1Fixed in: puppet

Vendor Advisories (2)

rubygemsGHSA-g89m-3wjw-h857low

Puppet vulnerable to Path Traversal

Oct 24, 2017
redhatCVE-2012-3865Low

puppet: authenticated clients allowed to delete arbitrary files on the puppet master

Jul 10, 2012

References

lists.opensuse.org / opensuse-security-announce/2012-08/msg00006.html
lists.opensuse.org / opensuse-updates/2012-07/msg00036.html
puppetlabs.com / security/cve/cve-2012-3865
Vendor Advisory
bugzilla.redhat.com / show_bug.cgi
secunia.com / advisories/50014
github.com / puppetlabs/puppet/commit/554eefc55f57ed2b76e5ee04d8f194d36f6ee67f
ExploitPatch
github.com / puppetlabs/puppet/commit/d80478208d79a3e6d6cb1fbc525e24817fe8c4c6
ExploitPatch
debian.org / security/2012/dsa-2511
ubuntu.com / usn/USN-1506-1