Skip to content
OpenAdvisories
Medium · 6.8 CVE-2023-5309 EUVD-2023-57632GHSA-c7r6-m4rr-fqqm

Broken Session Management in Puppet Enterprise

Published Nov 7, 2023 · Updated Sep 4, 2024 · Assigned by Perforce

Vendor: Puppet Product: Puppet Enterprise

Description

Versions of Puppet Enterprise prior to 2021.7.6 and 2023.5 contain a flaw which results in broken session management for SAML implementations.

Affected products

VendorProductAffectedFixed
Puppet Puppet Enterprise 2021.7.0 – < 2021.7.6, 2023.0.0 – < 2023.5 2021.7.6

Advisories 1

References