Unscored CVE-2021-36756 EUVD-2021-23344GHSA-m835-w378-p8vp

CFEngine Enterprise 3.15.0 through 3.15.4 has Missing SSL Certificate Validation.

Published Oct 27, 2021 · Updated Aug 4, 2024 · Assigned by mitre

Description

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

openSUSE

Security tracker ↗

Release	Package	Fixed in	Advisory
openSUSE Tumbleweed	cfengine	3.19.0-1.1	openSUSE-SU-2024:11873-1

Advisories 1

openSUSE-SU-2024:11873-1 cfengine-3.19.0-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026

References

https://cfengine.com/downloads/cfengine-enterprise/
https://cfengine.com/blog/2021/cve-2021-38379-and-cve-2021-36756/