CVE-2018-11748

CVE-2018-11748 affects the Puppet device_manager module. Previous releases create configuration files that contain credentials and are world-readable, enabling credential exposure. This issue is fixed in device_manager 2.7.0 . Exploitation details are not provided in the documents; remediation is...