Description
Puppet Enterprise (PE) before 2.6.1 does not properly invalidate sessions when the session secret has changed, which allows remote authenticated users to retain access via unspecified vectors.
Unscored
CVE-2012-5158
EUVD-2012-5081GHSA-ggqp-jmq3-2qm6
Puppet Enterprise (PE) before 2.6.1 does not properly invalidate sessions when the session secret has changed, which allows remote authenti…
Published Mar 14, 2014 · Updated Aug 6, 2024 · Assigned by mitre