Design/Logic Flaw

Versions of Puppet Enterprise prior to 2021.7.6 and 2023.5 contain a flaw which results in broken session management for SAML implementations...

CVE-2023-5309

CVE-2023-5309 affects Puppet Enterprise; versions prior to 2021.7.6 and prior to 2023.5 have a flaw that causes broken session management for SAML implementations. The underlying issue is a session-management defect in Puppet Enterprise’s SAML handling, leading to interruptions of authenticated s...

CVE-2023-5309 Broken Session Management in Puppet Enterprise

Versions of Puppet Enterprise prior to 2021.7.6 and 2023.5 contain a flaw which results in broken session management for SAML implementations...

CVE-2023-5309 Broken Session Management in Puppet Enterprise

Versions of Puppet Enterprise prior to 2021.7.6 and 2023.5 contain a flaw which results in broken session management for SAML implementations...

CVE-2023-5309: Session Fixation

Versions of Puppet Enterprise prior to 2021.7.6 and 2023.5 contain a flaw which results in broken session management for SAML implementations...

PT-2023-32029 · Puppet · Puppet Enterprise

Name of the Vulnerable Software and Affected Versions: Puppet Enterprise versions prior to 2021.7.6 Puppet Enterprise versions prior to 2023.5 Description: The issue results in broken session management for SAML implementations. Recommendations: For versions prior to 2021.7.6, update to version...

Puppet Enterprise Authorization Issues Vulnerability

Puppet is a set of configuration management tools based on a client/server C/S architecture from Puppet Labs in the U.S. It can be used to manage profiles, users, cron tasks, packages, system services, etc. Puppet Enterprise is the enterprise version of Puppet. An authorization issue vulnerabilit...

Puppet Agent 7.x < 7.4.0 Deserialization Vulnerability

Utilization of a module presented a security risk by allowing the deserialization of untrusted/user supplied data. This is resolved in the Puppet Agent 7.4.0 release. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number...

Puppet Enterprise < 2019.8.9 / 2021.x < 2021.4.0 Information Disclosure

A flaw was discovered in Puppet Enterprise and other Puppet products where sensitive plan parameters may be logged. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive tex...

Puppet Enterprise 2021.7.1 / 2023.0 DoS

A Regular Expression Denial of Service ReDoS issue was discovered in Puppet Server 7.9.2 certificate validation. An issue related to specifically crafted certificate names significantly slowed down server operations. Note that Nessus has not tested for this issue but has instead relied only on t...

Puppet Enterprise < 2019.8.6 Information Disclosure

PuppetDB logging included potentially sensitive system information. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text in this plugin were extracted from the...

Puppet Enterprise < 2019.8.9 / 2021.x < 2021.4.0 DoS

A flaw was discovered in Puppet Agent where the agent may silently ignore Augeas settings or may be vulnerable to a Denial of Service condition prior to the first pluginsync. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version...

Puppet Agent 6.x < 6.25.1 / 7.x < 7.12.1 Vulnerability

A flaw was discovered in Puppet Agent and Puppet Server that may result in a leak of HTTP credentials when following HTTP redirects to a different host. This is similar to CVE-2018-1000007. Note that Nessus has not tested for this issue but has instead relied only on the application's self-report...

Puppet Enterprise < 2019.8.7 / 2021.x < 2021.2 Nginx Vulnerability

or more information about this vulnerability, refer to the security announcements for CVE-2021-23017 Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text in this plugi...

Puppet Enterprise < 2019.8.7 / 2021.x < 2021.2 SQLi

A flaw was discovered in Puppet DB, this flaw results in an escalation of privileges which allows a user with read access to PuppetDB to delete tables via an SQL query. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number...

Puppet Agent 6.x < 6.22.1 / 7.x < 7.6.1 Vulnerability

On February 16, 2021, OpenSSL published security updates addressing CVE-2021-23841, CVE-2021-23839, and CVE-2021-23840. Previous releases of Puppet Agent contain a vulnerable version of OpenSSL. For more information about this vulnerability, refer to the OpenSSL security announcement. Note that...

Puppet Enterprise < 2019.8.8 / 2021.3.0 Information Disclosure Vulnerability

A flaw was discovered in bolt-server and ace where running a task with sensitive parameters results in those sensitive parameters being logged when they should not be. This issue only affects SSH/WinRM nodes inventory service nodes. Note that Nessus has not tested for this issue but has instead...

Puppet Agent 6.x < 6.22.1 / 7.x < 7.6.1 Vulnerability

On March 31, 2021, curl published security updates addressing CVE-2021-22876 and CVE-2021-22890. Previous releases of Puppet Agent contain a vulnerable version of curl. For more information about this vulnerability, refer to the curl security announcements. Note that Nessus has not tested for thi...

Puppet Enterprise < 2019.8.6 / 2021.1.0 Multiple OpenSSL Vulnerabilities

The openssl software which exists in puppet enterprise prior to 2019.8.6 has multiple vulnerabilities. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text in this...

Puppet Enterprise < 2019.8.6 PostgreSQL Vulnerabilities

For more information about these vulnerabilities, refer to the Postgresql News Page. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text in this plugin were extracted...