| Package | Affected versions | Patched versions |
|---|---|---|
| puppet enterprise | = 3.8.0≥ 3.7.0, ≤ 3.7.2 |
Puppet Enterprise 3.7.x and 3.8.0 might allow remote authenticated users to manage certificates for arbitrary nodes by leveraging a client certificate trusted by the master, aka a "Certificate Authority Reverse Proxy Vulnerability."
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free