Puppet Enterprise 3.7.x and 3.8.0 might allow remote authenticated users to manage certificates for arbitrary nodes by leveraging a client certificate trusted by the master, aka a "Certificate Authority Reverse Proxy Vulnerability."
Published at: December 21, 2017 at 03:29PM
View on website
New vulnerability on the NVD: CVE-2015-4100
Tag: government hack NVD security
No comments: