Security Advisory

CVE-2018-11746

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2018-07-03 13:00:00

Last updated 2024-09-16 23:55:51

Assigner puppet

CVSS score 8.6

State PUBLISHED

Description

In Puppet Discovery prior to 1.2.0, when running Discovery against Windows hosts, WinRM connections can fall back to using basic auth over insecure channels if a HTTPS server is not available. This can expose the login credentials being used by Puppet Discovery.

← Browse all CVEs View on cve.org ↗