A Regular Expression Denial of Service (ReDoS) issue was discovered in Puppet Server 7.9.2 certificate validation. An issue related to specifically crafted certificate names significantly slowed down server operations.
5.3CVSS
5.3AI Score
0.0005EPSS
A privilege escalation allowing remote code execution was discovered in the orchestration service.
9.8CVSS
9.9AI Score
0.004EPSS
For certificates that utilize the auto-renew feature in Puppet Server, a flaw exists which prevents the certificates from being revoked.
7.5CVSS
7.4AI Score
0.001EPSS
Versions of Puppet Enterprise prior to 2021.7.6 and 2023.5 contain a flaw which results in broken session management for SAML implementations.
9.8CVSS
9.3AI Score
0.001EPSS