Puppet: >> Puppet Enterprise >> 3.2.3 Security Vulnerabilities
Open redirect vulnerability in the Console in Puppet Enterprise before 2015.2.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the string parameter.
CVSS Score
6.1
EPSS Score
0.002
Published
2017-01-12
Puppet Enterprise before 3.7.1 allows remote authenticated users to obtain licensing and certificate signing request information by leveraging access to an unspecified API endpoint.
CVSS Score
4.0
EPSS Score
0.001
Published
2014-12-19
Page 3