Security Advisory
CVE-2018-11751
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
Previous versions of Puppet Agent didn't verify the peer in the SSL connection prior to downloading the CRL. This issue is resolved in Puppet Agent 6.4.0.