Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-mmpq-gqvm-78gf

Опубликовано: 14 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 6.5

Описание

The default vhost configuration file in Puppet before 3.6.2 does not include the SSLCARevocationCheck directive, which might allow remote attackers to obtain sensitive information via a revoked certificate when a Puppet master runs with Apache 2.4.

The default vhost configuration file in Puppet before 3.6.2 does not include the SSLCARevocationCheck directive, which might allow remote attackers to obtain sensitive information via a revoked certificate when a Puppet master runs with Apache 2.4.

EPSS

Процентиль: 49%
0.00259
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-295

Связанные уязвимости

CVSS3: 6.5
ubuntu
около 8 лет назад

The default vhost configuration file in Puppet before 3.6.2 does not include the SSLCARevocationCheck directive, which might allow remote attackers to obtain sensitive information via a revoked certificate when a Puppet master runs with Apache 2.4.

redhat
больше 11 лет назад

The default vhost configuration file in Puppet before 3.6.2 does not include the SSLCARevocationCheck directive, which might allow remote attackers to obtain sensitive information via a revoked certificate when a Puppet master runs with Apache 2.4.

CVSS3: 6.5
nvd
около 8 лет назад

The default vhost configuration file in Puppet before 3.6.2 does not include the SSLCARevocationCheck directive, which might allow remote attackers to obtain sensitive information via a revoked certificate when a Puppet master runs with Apache 2.4.

CVSS3: 6.5
debian
около 8 лет назад

The default vhost configuration file in Puppet before 3.6.2 does not i ...

suse-cvrf
больше 11 лет назад

Security update for puppet

EPSS

Процентиль: 49%
0.00259
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-295