Description
Puppet Enterprise before 3.1.0 does not properly restrict the number of authentication attempts by a console account, which makes it easier for remote attackers to bypass intended access restrictions via a brute-force attack.
Unscored
CVE-2013-4965
EUVD-2013-4809GHSA-8p9x-4g9j-2649
Puppet Enterprise before 3.1.0 does not properly restrict the number of authentication attempts by a console account, which makes it easier…
Published Oct 25, 2013 · Updated Sep 16, 2024 · Assigned by mitre