Lucene search
PRIOn knowledge basePRION:CVE-2017-2297HistoryFeb 01, 2018 - 10:29 p.m.
Default configuration
2018-02-0122:29:00
PRIOn knowledge base
www.prio-n.com
5
0.001 Low
EPSS
Percentile
42.8%
Puppet Enterprise versions prior to 2016.4.5 and 2017.2.1 did not correctly authenticate users before returning labeled RBAC access tokens. This issue has been fixed in Puppet Enterprise 2016.4.5 and 2017.2.1. This only affects users with labeled tokens, which is not the default for tokens.
| CPE | Name | Operator | Version |
|---|---|---|---|
| puppet_enterprise | eq | 2016.5.1 | |
| puppet_enterprise | lt | 2016.4.5 | |
| puppet_enterprise | eq | 2016.5.2 | |
| puppet_enterprise | eq | 2017.1.1 | |
| puppet_enterprise | eq | 2017.1.0 |
References
Related
nvd
nvd
CVE-2017-2297
2018-02-01 22:29:00
debiancve
debiancve
CVE-2017-2297
2018-02-01 22:29:00
cve
cve
CVE-2017-2297
2018-02-01 22:29:00
cvelist
cvelist
CVE-2017-2297
2018-02-01 00:00:00
openvas
openvas
Puppet Enterprise < 2016.4.4 / 2017 < 2017.2.1 Multiple Vulnerabilities
2018-02-02 00:00:00
Puppet Enterprise < 2016.4.5, 2016.5.x < 2017.2.1 Multiple Vulnerabilities
2017-07-06 00:00:00
nessus
nessus
Puppet Enterprise < 2016.4.5 / 2016.5.x / 2017.1.x Multiple Vulnerabilities
2019-10-09 00:00:00