CVE-2018-11747

2019-03-1719:16:13

puppet

www.cve.org

9.4 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

53.4%

JSON

Previously, Puppet Discovery was shipped with a default generated TLS certificate in the nginx container. In version 1.4.0, a unique certificate will be generated on installation or the user will be able to provide their own TLS certificate for ingress.

CNA Affected

[
  {
    "product": "Puppet Discovery",
    "vendor": "Puppet",
    "versions": [
      {
        "status": "affected",
        "version": "all versions prior to 1.4.0"
      }
    ]
  }
]