Design/Logic Flaw

2023-11-0719:15:00

PRIOn knowledge base

www.prio-n.com

puppet

enterprise

security flaw

saml

session management

7.1 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

39.3%

Versions of Puppet Enterprise prior to 2021.7.6 and 2023.5 contain a flaw which results in broken session management for SAML implementations.

CPENameOperatorVersion
puppet_enterprisege2023.0
puppet_enterpriselt2023.5.0
puppet_enterpriselt2021.7.6

Name	Operator	Version
puppet_enterprise	ge	2023.0
puppet_enterprise	lt	2023.5.0
puppet_enterprise	lt	2021.7.6

References

www.puppet.com/security/cve/cve-2023-5309-broken-session-management-puppet-enterprise