| Package | Affected versions | Patched versions |
|---|---|---|
| puppet server | ≥ 6.0.0, < 6.4.0 | 6.4.0 |
Previous versions of Puppet Agent didn't verify the peer in the SSL connection prior to downloading the CRL. This issue is resolved in Puppet Agent 6.4.0.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free