NetSight
medium6.8

CVE-2023-5309

Versions of Puppet Enterprise prior to 2021.7.6 and 2023.5 contain a flaw which results in broken session management for SAML implementations.

Impact

Versions of Puppet Enterprise prior to 2021.7.6 and 2023.5 contain a flaw which results in broken session management for SAML implementations.

Affected products

VendorProductAffected versions
PuppetPuppet Enterprise
before 2021.7.6
from 2023.0 before 2023.5.0

Weakness classification

References