Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-8p9x-4g9j-2649

Опубликовано: 14 мая 2022
Источник: github
Github: Не прошло ревью

Описание

Puppet Enterprise before 3.1.0 does not properly restrict the number of authentication attempts by a console account, which makes it easier for remote attackers to bypass intended access restrictions via a brute-force attack.

Puppet Enterprise before 3.1.0 does not properly restrict the number of authentication attempts by a console account, which makes it easier for remote attackers to bypass intended access restrictions via a brute-force attack.

EPSS

Процентиль: 72%
0.00721
Низкий

Дефекты

CWE-287

Связанные уязвимости

ubuntu
больше 12 лет назад

Puppet Enterprise before 3.1.0 does not properly restrict the number of authentication attempts by a console account, which makes it easier for remote attackers to bypass intended access restrictions via a brute-force attack.

nvd
больше 12 лет назад

Puppet Enterprise before 3.1.0 does not properly restrict the number of authentication attempts by a console account, which makes it easier for remote attackers to bypass intended access restrictions via a brute-force attack.

debian
больше 12 лет назад

Puppet Enterprise before 3.1.0 does not properly restrict the number o ...

EPSS

Процентиль: 72%
0.00721
Низкий

Дефекты

CWE-287