CVE-2016-2787

The Puppet Communications Protocol in Puppet Enterprise 2015.3.x before 2015.3.3 does not properly validate certificates for the broker node, which allows…

published February 13, 2017

CVSS
—
EPSS
1%
Percentile
47.5
In the wild
Unconfirmed
What it is

The Puppet Communications Protocol in Puppet Enterprise 2015.3.x before 2015.3.3 does not properly validate certificates for the broker node, which allows remote non-whitelisted hosts to prevent runs from triggering via unspecified vectors.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00596 · 47.5th percentile
Published
2017-02-13T18:00Z
EPSS history
Timeline
  • 13 FEB 18:00Z
    The Puppet Communications Protocol in Puppet Enterprise 2015.3.x before 2015.3.3 does not properly validate certificates for the broker node, which allows…
    cvelistv5