CVE-2013-4966

The master external node classification script in Puppet Enterprise before 3.2.0 does not verify the identity of consoles, which allows remote attackers to create arbitrary classifications on the master by spoofing a console...

PT-2014-2881

Name of the Vulnerable Software and Affected Versions Puppet Enterprise versions prior to 3.2.0 Description The issue concerns the master external node classification script, which fails to verify the identity of consoles. This allows remote attackers to create arbitrary classifications on the...