medium6.8
CVE-2015-4100
Puppet Enterprise 3.7.x and 3.8.0 might allow remote authenticated users to manage certificates for arbitrary nodes by leveraging a client certificate trusted …
Impact
Puppet Enterprise 3.7.x and 3.8.0 might allow remote authenticated users to manage certificates for arbitrary nodes by leveraging a client certificate trusted by the master, aka a "Certificate Authority Reverse Proxy Vulnerability."
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Puppet | Puppet Enterprise | from 3.7.0 through 3.7.2 Version 3.8.0 |