CVE-2018-11751 PUBLISHED

Reported by puppet · Published December 16, 2019

Previous versions of Puppet Agent didn't verify the peer in the SSL connection prior to downloading the CRL. This issue is resolved in Puppet Agent 6.4.0.

Affected Products

VendorProductVersions
n/aPuppet Agent, PuppetPuppet Agent 6.x prior to 6.4.0, Puppet 6.x prior to 6.4.x
n/aPuppet Agent, Puppet*

Timeline

References

Open in Interactive Console →