CPE Details
Puppet Puppet Enterprise 2023.0
2023.0
2023-05-11
03h56 +00:00
03h56 +00:00
2023-06-16
22h05 +00:00
22h05 +00:00
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
CPE Name: cpe:2.3:a:puppet:puppet_enterprise:2023.0:*:*:*:*:*:*:*
Informations
Vendor
puppetProduct
puppet_enterpriseVersion
2023.0Related CVE
| CVE ID | Published | Description | Score | Severity |
|---|---|---|---|---|
| Versions of Puppet Enterprise prior to 2021.7.6 and 2023.5 contain a flaw which results in broken session management for SAML implementations. | 9.8 |
Critical |
||
| A privilege escalation allowing remote code execution was discovered in the orchestration service. | 9.8 |
Critical |
||
| A Regular Expression Denial of Service (ReDoS) issue was discovered in Puppet Server 7.9.2 certificate validation. An issue related to specifically crafted certificate names significantly slowed down server operations. | 5.3 |
Medium |
The information presented on CVE Find originates from several carefully selected reference sources. CVE data is provided by MITRE Corporation and the National Vulnerability Database (NVD). The Known Exploited Vulnerabilities (KEV) catalog is sourced from the Cybersecurity and Infrastructure Security Agency (CISA), while EPSS scores come from FIRST.org. Additionally, data regarding software weaknesses (CWE) and common attack patterns (CAPEC) is maintained by MITRE Corporation, and information on hardware and software configurations (CPE) is provided by the NVD.