Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-vrzs-81t1-jyax
Vulnerability ID VCID-vrzs-81t1-jyax
Aliases CVE-2011-3872
Summary Multiple vulnerabilities have been found in Puppet, the worst of which might allow local attackers to gain escalated privileges.
Status Published
Exploitability 0.5
Weighted Severity 0.0
Risk None
Affected and Fixed Packages Package Details
Weaknesses (0)
There are no known CWE.
System Score Found at
epss 0.02778 https://api.first.org/data/v1/epss?cve=CVE-2011-3872
epss 0.02778 https://api.first.org/data/v1/epss?cve=CVE-2011-3872
epss 0.02778 https://api.first.org/data/v1/epss?cve=CVE-2011-3872
epss 0.02778 https://api.first.org/data/v1/epss?cve=CVE-2011-3872
epss 0.02778 https://api.first.org/data/v1/epss?cve=CVE-2011-3872
epss 0.02778 https://api.first.org/data/v1/epss?cve=CVE-2011-3872
epss 0.02778 https://api.first.org/data/v1/epss?cve=CVE-2011-3872
epss 0.02778 https://api.first.org/data/v1/epss?cve=CVE-2011-3872
epss 0.02778 https://api.first.org/data/v1/epss?cve=CVE-2011-3872
Reference id Reference type URL
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3872.json
https://api.first.org/data/v1/epss?cve=CVE-2011-3872
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3872
748447 https://bugzilla.redhat.com/show_bug.cgi?id=748447
GLSA-201203-03 https://security.gentoo.org/glsa/201203-03
USN-1238-1 https://usn.ubuntu.com/1238-1/
No exploits are available.
There are no known vectors.
Exploit Prediction Scoring System (EPSS)
Percentile 0.85995
EPSS Score 0.02778
Published At April 1, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-04-01T13:02:57.558604+00:00 Gentoo Importer Import https://security.gentoo.org/glsa/201203-03 38.0.0