Description
Puppet Enterprise 3.7.x and 3.8.0 might allow remote authenticated users to manage certificates for arbitrary nodes by leveraging a client certificate trusted by the master, aka a "Certificate Authority Reverse Proxy Vulnerability."
Unscored
CVE-2015-4100
EUVD-2015-4125GHSA-75m2-x9qh-j7qr
Puppet Enterprise 3.7.x and 3.8.0 might allow remote authenticated users to manage certificates for arbitrary nodes by leveraging a client …
Published Dec 21, 2017 · Updated Aug 6, 2024 · Assigned by mitre