CVE-2013-4762

Puppet Enterprise before 3.0.1 does not sufficiently invalidate a session when a user logs out, which might allow remote attackers to hijack sessions by…

published August 20, 2013

CVSS
—
EPSS
2%
Percentile
76.1
In the wild
Unconfirmed
What it is

Puppet Enterprise before 3.0.1 does not sufficiently invalidate a session when a user logs out, which might allow remote attackers to hijack sessions by obtaining an old session ID.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01636 · 76.1th percentile
Published
2013-08-20T22:00Z
EPSS history
Timeline
  • 20 AUG 22:00Z
    Puppet Enterprise before 3.0.1 does not sufficiently invalidate a session when a user logs out, which might allow remote attackers to hijack sessions by…
    cvelistv5