medium5.3
CVE-2016-2787
The Puppet Communications Protocol in Puppet Enterprise 2015.3.x before 2015.3.3 does not properly validate certificates for the broker node, which allows remo…
Impact
The Puppet Communications Protocol in Puppet Enterprise 2015.3.x before 2015.3.3 does not properly validate certificates for the broker node, which allows remote non-whitelisted hosts to prevent runs from triggering via unspecified vectors.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Puppet | Puppet Enterprise | Version 2015.3.2 |
| Puppetlabs | Puppet Enterprise | Version 2015.3 |