CVE-2012-5158

Puppet Enterprise (PE) before 2.6.1 does not properly invalidate sessions when the session secret has changed, which allows remote authenticated users to…

published March 14, 2014

CVSS
—
EPSS
1%
Percentile
56.1
In the wild
Unconfirmed
What it is

Puppet Enterprise (PE) before 2.6.1 does not properly invalidate sessions when the session secret has changed, which allows remote authenticated users to retain access via unspecified vectors.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00807 · 56.1th percentile
Published
2014-03-14T16:00Z
EPSS history
Timeline
  • 14 MAR 16:00Z
    Puppet Enterprise (PE) before 2.6.1 does not properly invalidate sessions when the session secret has changed, which allows remote authenticated users to…
    cvelistv5