Security Advisory

CVE-2013-4963

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2014-03-14 16:00:00
Last updated 2024-08-06 16:59:41
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

Multiple cross-site request forgery (CSRF) vulnerabilities in Puppet Enterprise (PE) before 3.0.1 allow remote attackers to hijack the authentication of users for requests that deleting a (1) report, (2) group, or (3) class or possibly have other unspecified impact.