CVE-2018-11751

puppet-agent: Puppet Agent does not properly verify SSL connection when downloading a CRL

Published Dec 16, 2019 CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed
Description
Previous versions of Puppet Agent didn't verify the peer in the SSL connection prior to downloading the CRL. This issue is resolved in Puppet Agent 6.4.0.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2018-3770 Previous versions of Puppet Agent didn't verify the peer in the SSL connection prior to downloading the CRL. This issue is resolved in Puppet Agent 6.4.0.
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
puppet
Published
Updated
Aug 5, 2024, 8:17 AM
Reserved
Jun 5, 2018, 12:00 AM
Status
Modified
Published
Dec 16, 2019, 10:15 PM
Modified
Jun 17, 2026, 1:36 AM
Severity
Low
Public date
Dec 12, 2019, 12:00 AM