Beveiligingsadvies

CVE-2016-2787

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2017-02-13 18:00:00
Laatst bijgewerkt 2024-08-05 23:32:21
Toegewezen door mitre
CVSS-score geen score
Status PUBLISHED

Beschrijving

The Puppet Communications Protocol in Puppet Enterprise 2015.3.x before 2015.3.3 does not properly validate certificates for the broker node, which allows remote non-whitelisted hosts to prevent runs from triggering via unspecified vectors.