CVE-2015-4100

Puppet Enterprise 3.7.x and 3.8.0 might allow remote authenticated users to manage certificates for arbitrary nodes by leveraging a client certificate trusted by the master, aka a "Certificate Authority Reverse Proxy Vulnerability."...

CVE-2015-4100

Removed by vendor...

CVE-2015-4100: Improper Certificate Validation

Puppet Enterprise 3.7.x and 3.8.0 might allow remote authenticated users to manage certificates for arbitrary nodes by leveraging a client certificate trusted by the master, aka a "Certificate Authority Reverse Proxy Vulnerability."...

PT-2017-6738

Name of the Vulnerable Software and Affected Versions Puppet Enterprise versions 3.7.x through 3.8.0 Description The issue allows remote authenticated users to manage certificates for arbitrary nodes by leveraging a client certificate trusted by the master. This is related to a "Certificate...