Multiple cross-site request forgery (CSRF) vulnerabilities in the (1) node request management, (2) live management, and (3) user administration components in the console in Puppet Enterprise (PE) before 2.7.1 allow remote attackers to hijack the authentication of unspecified victims via unknown vectors.
References
Link | Resource |
---|---|
https://puppetlabs.com/security/cve/cve-2013-1399 | Vendor Advisory |
https://puppetlabs.com/security/cve/cve-2013-1399 | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 01:49
Type | Values Removed | Values Added |
---|---|---|
References | () https://puppetlabs.com/security/cve/cve-2013-1399 - Vendor Advisory |
Information
Published : 2014-03-14 16:55
Updated : 2024-11-21 01:49
NVD link : CVE-2013-1399
Mitre link : CVE-2013-1399
CVE.ORG link : CVE-2013-1399
JSON object : View
Products Affected
puppet
- puppet_enterprise
puppetlabs
- puppet
CWE
CWE-352
Cross-Site Request Forgery (CSRF)