CVE-2012-3867

lib/puppet/ssl/certificate_authority.rb in Puppet before 2.6.17 and 2.7.x before 2.7.18, and Puppet Enterprise before 2.5.2, does not properly restrict the…

published August 6, 2012

CVSS
—
EPSS
2%
Percentile
84.2
In the wild
Unconfirmed
What it is

lib/puppet/ssl/certificate_authority.rb in Puppet before 2.6.17 and 2.7.x before 2.7.18, and Puppet Enterprise before 2.5.2, does not properly restrict the characters in the Common Name field of a Certificate Signing Request (CSR), which makes it easier for user-assisted remote attackers to trick administrators into signing a crafted agent certificate via ANSI control sequences.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02453 · 84.2th percentile
Published
2012-08-06T16:00Z
EPSS history
Timeline
  • 06 AUG 16:00Z
    lib/puppet/ssl/certificate_authority.rb in Puppet before 2.6.17 and 2.7.x before 2.7.18, and Puppet Enterprise before 2.5.2, does not properly restrict the…
    cvelistv5