CVE-2021-27018

ALTO 7.5CVE-2021-27018 · Published 30/08/2021 · updated 17/06/2026

In breve

CVE-2021-27018 è una vulnerabilità ALTO (CVSS 7.5) che riguarda remediate (puppet).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.54%, superiore al 45.5% delle vulnerabilità.
Correzione: aggiornare a 2.0.1 o successiva.

Package	Affected versions	Patched versions
remediate puppet	`< 2.0.1`	`2.0.1`

Description

The mechanism which performs certificate validation was discovered to have a flaw that resulted in certificates signed by an internal certificate authority to not be properly validated. This issue only affects clients that are configured to utilize Tenable.sc as the vulnerability data source.

References

puppet.com/security/cve/CVE-2021-27018 · Vendor Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free