CVE-2018-11751 - CERT CVE

  1. CVE-2018-11751

ID CVE-2018-11751
Sažetak Previous versions of Puppet Agent didn't verify the peer in the SSL connection prior to downloading the CRL. This issue is resolved in Puppet Agent 6.4.0.
Reference
CVSS
Base: 4.8
Impact: 4.9
Exploitability:6.5
Pristup
VektorSloženostAutentikacija
ADJACENT_NETWORK LOW NONE
Impact
PovjerljivostCjelovitostDostupnost
NONE PARTIAL PARTIAL
CVSS vektor AV:A/AC:L/Au:N/C:N/I:P/A:P
Zadnje važnije ažuriranje 07-04-2020 - 13:10
Objavljeno 16-12-2019 - 22:15