CVE-2013-4965

Puppet Enterprise before 3.1.0 does not properly restrict the number of authentication attempts by a console account, which makes it easier for remote…

published October 25, 2013

CVSS
—
EPSS
1%
Percentile
70.6
In the wild
Unconfirmed
What it is

Puppet Enterprise before 3.1.0 does not properly restrict the number of authentication attempts by a console account, which makes it easier for remote attackers to bypass intended access restrictions via a brute-force attack.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01318 · 70.6th percentile
Published
2013-10-25T23:00Z
EPSS history
Timeline
  • 25 OCT 23:00Z
    Puppet Enterprise before 3.1.0 does not properly restrict the number of authentication attempts by a console account, which makes it easier for remote…
    cvelistv5