Puppet: >> Puppet Enterprise >> 2023.1.0 Security Vulnerabilities
Versions of Puppet Enterprise prior to 2021.7.6 and 2023.5 contain a flaw which results in broken session management for SAML implementations.
CVSS Score
6.8
EPSS Score
0.003
Published
2023-11-07
A privilege escalation allowing remote code execution was discovered in the orchestration service.
CVSS Score
9.8
EPSS Score
0.03
Published
2023-06-07