Puppet: >> Puppet Enterprise >> 2023.0 Security Vulnerabilities
Versions of Puppet Enterprise prior to 2021.7.6 and 2023.5 contain a flaw which results in broken session management for SAML implementations.
CVSS Score
6.8
EPSS Score
0.003
Published
2023-11-07
A privilege escalation allowing remote code execution was discovered in the orchestration service.
CVSS Score
9.8
EPSS Score
0.03
Published
2023-06-07
A Regular Expression Denial of Service (ReDoS) issue was discovered in Puppet Server 7.9.2 certificate validation. An issue related to specifically crafted certificate names significantly slowed down server operations.
CVSS Score
5.3
EPSS Score
0.0
Published
2023-05-04