CVE-2013-4968

MEDIUM 6.1CVE-2013-4968 · Published 11/12/2019 · updated 16/06/2026

In short

CVE-2013-4968 is a MEDIUM (CVSS 6.1) vulnerability affecting puppet enterprise (puppet).
Chance of exploitation in the next 30 days (EPSS): 0.82%, higher than 57.1% of all vulnerabilities.
Fix: update to 3.0.1 or later.

Package	Affected versions	Patched versions
puppet enterprise puppet	`≥ 2.0.0, < 3.0.1`	`3.0.1`

Description

Puppet Enterprise before 3.0.1 allows remote attackers to (1) conduct clickjacking attacks via unspecified vectors related to the console, and (2) conduct cross-site scripting (XSS) attacks via unspecified vectors related to "live management."

References

puppetlabs.com/security/cve/cve-2013-4968 · Vendor Advisory

More vulnerabilities in puppet enterprise

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

puppet enterprise

puppet

≥ 2.0.0, < 3.0.1

3.0.1

More vulnerabilities in puppet enterprise

See all →