CVE-2013-4958 PUBLISHED CVSS 6.900000095367432 MEDIUM

Puppet Enterprise before 3.0.1 does not use a session timeout, which makes it easier for attackers to gain privileges by leveraging an unattended workstation.

EPSS 0.04% · 12.5th percentile

Risk Scores

CVSS v2.0
6.900000095367432
EPSS Score
0.04%
12.5th percentile

Affected Products

VendorProductVersions
puppetpuppet_enterprise2.8.3, 0, 2.5.1
n/an/an/a

Timeline

References

Open in Interactive Console →