CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

3 matches found

CVE•added 2011/10/27 8:0 p.m.•77 views

CVE-2011-3872

CVE-2011-3872 affects Puppet 2.6.x <2.6.12, 2.7.x <2.7.6, and Puppet Enterprise 1.0–1.2

2.6CVSS6.2AI score0.02778EPSS

Exploits0References11Affected Software2

Debian CVE•added 2011/10/27 8:0 p.m.•29 views

CVE-2011-3872

Puppet 2.6.x before 2.6.12 and 2.7.x before 2.7.6, and Puppet Enterprise PE Users 1.0, 1.1, and 1.2 before 1.2.4, when signing an agent certificate, adds the Puppet master's certdnsnames values to the X.509 Subject Alternative Name field of the certificate, which allows remote attackers to spoof ...

2.6CVSS6.1AI score0.02778EPSS

Exploits0