RSS   Vulnerabilities for 'Discovery'   RSS

2018-07-03
 
CVE-2018-11746

CWE-522
 

 
In Puppet Discovery prior to 1.2.0, when running Discovery against Windows hosts, WinRM connections can fall back to using basic auth over insecure channels if a HTTPS server is not available. This can expose the login credentials being used by Puppet Discovery.

 

 >>> Vendor: Puppet 19 Products
Discovery
Enterprise
Firewall
Puppet
Puppet enterprise
Puppet dashboard
Mcollective
Facter
Hiera
Puppet server
Stdlib
Puppet agent
Puppetlabs-apache
Chloride
Marionette collective
Continuous delivery
Puppetdb
Remediate
Puppet connect


Copyright 2024, cxsecurity.com

 

Back to Top