CVE-2013-2275

CVE-2013-2275 describes a vulnerability in Puppet masters (versions 0.25.0 and later, specifically Puppet before 2.6.18, 2.7.x before 2.7.21, and 3.1.x before 3.1.1, and Puppet Enterprise before 1.2.7 and 2.7.x before 2.7.2). This flaw allows remote authenticated nodes to submit reports for other nodes. The vulnerability has a CVSS score of 4.0, indicating a low severity, with an attack vector of network, low attack complexity, requiring authentication, and resulting in partial integrity impact. There is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.