Vulnerabilities (CVE)

Filtered by vendor Puppetlabs Subscribe
Filtered by product Puppet Enterprise
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2016-2787 2 Puppet, Puppetlabs 2 Puppet Enterprise, Puppet Enterprise 2024-11-21 5.0 MEDIUM 5.3 MEDIUM
The Puppet Communications Protocol in Puppet Enterprise 2015.3.x before 2015.3.3 does not properly validate certificates for the broker node, which allows remote non-whitelisted hosts to prevent runs from triggering via unspecified vectors.