Security Advisory

CVE-2016-2787

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2017-02-13 18:00:00
Last updated 2024-08-05 23:32:21
Assigner mitre
State PUBLISHED

Description

The Puppet Communications Protocol in Puppet Enterprise 2015.3.x before 2015.3.3 does not properly validate certificates for the broker node, which allows remote non-whitelisted hosts to prevent runs from triggering via unspecified vectors.