← Database

CVE-2008-6557

CRITICAL CVSS: 10.0 Published: 2009-03-30 Modified: 2026-06-16

Description

cgi-bin/webutil.pl in The Puppet Master WebUtil 2.7 allows remote attackers to execute arbitrary commands via shell metacharacters in the details command.

Affected Platforms

Puppetmaster Webutil

Weakness Type

CWE-20

References