CVE-2013-1655

Puppet 2.7.x before 2.7.21 and 3.1.x before 3.1.1, when running Ruby 1.9.3 or later, allows remote attackers to execute arbitrary code via vectors related to "serialized attributes."

Date published : 2013-03-20

http://www.securityfocus.com/bid/58442

https://puppetlabs.com/security/cve/cve-2013-1655/