RSS   Podatności dla 'Discovery'   RSS

2018-07-03
 
CVE-2018-11746

CWE-522
 

 
In Puppet Discovery prior to 1.2.0, when running Discovery against Windows hosts, WinRM connections can fall back to using basic auth over insecure channels if a HTTPS server is not available. This can expose the login credentials being used by Puppet Discovery.

 

 >>> Vendor: Puppet 19 Produkty
Puppet
Mcollective
Enterprise
Puppetlabs-apache
Chloride
Puppet enterprise
Puppet dashboard
Hiera
Marionette collective
Puppet server
Stdlib
Facter
Discovery
Puppet agent
Continuous delivery
Puppetdb
Remediate
Puppet connect
Firewall


Copyright 2024, cxsecurity.com

 

Back to Top