Puppetlabs Puppet Enterprise vulnerabilities

1 vulnerability

Known vulnerabilities in Puppetlabs Puppet Enterprise, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

5.3CVE-2016-2787puppetpuppet_enterprise+1
EPSS score
0.60%
The Puppet Communications Protocol in Puppet Enterprise 2015.3.x before 2015.3.3 does not properly validate certificates for the broker node, which allows remote non-whitelisted hosts to prevent runs from triggering via unspecified vectors.