| Package | Affected versions | Patched versions |
|---|---|---|
| puppet enterprise | = 2015.3.2 | |
| puppet enterprise | = 2015.3 |
The Puppet Communications Protocol in Puppet Enterprise 2015.3.x before 2015.3.3 does not properly validate certificates for the broker node, which allows remote non-whitelisted hosts to prevent runs from triggering via unspecified vectors.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free