PT-2013-3885

Name of the Vulnerable Software and Affected Versions Puppet Enterprise versions prior to 2.8.0 Description The issue allows remote attackers to obtain console access via a crafted cookie because a "randomized secret" is not used in the CAS client config file cas client config.yml when upgrading...