Security Advisory

CVE-2013-4962

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2013-08-20 22:00:00

Last updated 2024-09-17 01:11:25

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

The reset password page in Puppet Enterprise before 3.0.1 does not force entry of the current password, which allows attackers to modify user passwords by leveraging session hijacking, an unattended workstation, or other vectors.

← Browse all CVEs View on cve.org ↗