CVE-2017-2296

In Puppet Enterprise 2017.1.x and 2017.2.1, using specially formatted strings with certain formatting characters as Classifier node group names or RBAC role display names causes errors, effectively causing a DOS to the service. This was resolved in Puppet Enterprise 2017.2.2...

CVE-2017-2296: Improper Input Validation

In Puppet Enterprise 2017.1.x and 2017.2.1, using specially formatted strings with certain formatting characters as Classifier node group names or RBAC role display names causes errors, effectively causing a DOS to the service. This was resolved in Puppet Enterprise 2017.2.2...

PT-2018-7108

Name of the Vulnerable Software and Affected Versions: Puppet Enterprise versions 2017.1.x through 2017.2.1 Description: The issue arises when specially formatted strings containing certain formatting characters are used as Classifier node group names or RBAC role display names, causing errors an...