4 matches found
puppetlabs-cve20113872
CVE-2011-3872 Remediation Toolkit Este módulo le ayudará a remediar permanentemente la vulnerabilidad CVE-2011-3872 AltNames. Guías de uso Consulte las guías de uso detalladas en: README-detailed.markdown para remediar su sitio con Puppet README-ssh-only.markdown Para remediar su sitio con SSH...
CVE-2011-3872
CVE-2011-3872 affects Puppet 2.6.x <2.6.12, 2.7.x <2.7.6, and Puppet Enterprise 1.0–1.2
CVE-2011-3872
Puppet 2.6.x before 2.6.12 and 2.7.x before 2.7.6, and Puppet Enterprise PE Users 1.0, 1.1, and 1.2 before 1.2.4, when signing an agent certificate, adds the Puppet master's certdnsnames values to the X.509 Subject Alternative Name field of the certificate, which allows remote attackers to spoof ...