Skip to main content
    CVE-2017-2298 — The mcollective-sshkey-security plugin before 0.5.1 for Puppet uses a server-specified identifier as part of a path where a file is written. A compromised server could use this to write a file to an a — CVE Database · The Intelligence Room