Multiple cross-site request forgery (CSRF) vulnerabilities in the (1) node request management, (2) live management, and (3) user administration components in the console in Puppet Enterprise (PE) before 2.7.1 allow remote attackers to hijack the authentication of unspecified victims via unknown vectors.
References
Link | Resource |
---|---|
https://puppetlabs.com/security/cve/cve-2013-1399 | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
No history.
Information
Published : 2014-03-14 16:55
Updated : 2024-02-28 12:20
NVD link : CVE-2013-1399
Mitre link : CVE-2013-1399
CVE.ORG link : CVE-2013-1399
JSON object : View
Products Affected
puppetlabs
- puppet
puppet
- puppet_enterprise
CWE
CWE-352
Cross-Site Request Forgery (CSRF)