Security Advisory

CVE-2016-2788

9.8
CRITICAL

Vulnerability Description

MCollective 2.7.0 and 2.8.x before 2.8.9, as used in Puppet Enterprise, allows remote attackers to execute arbitrary code via vectors related to the mco ping command.
Published Date February 13, 2017
Official Source NIST NVD Advisory