CVE-2008-6557: Puppetmaster Webutil

High severity, CVSS 10.0. EPSS: 3.2% chance of exploitation in the next 30 days.

cgi-bin/webutil.pl in The Puppet Master WebUtil 2.7 allows remote attackers to execute arbitrary commands via shell metacharacters in the details command.

Affected products

• Puppetmaster Webutil: version 2.7 only

Published 2009-03-30. Last modified 2026-06-16.