CVE-2018-11751

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2018-11751
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-11751.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2018-11751
Downstream
Published
2019-12-16T22:15:11.043Z
Modified
2026-03-10T14:33:14.232429Z
Severity
  • 5.4 (Medium) CVSS_V3 - CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L CVSS Calculator
Summary
[none]
Details

Previous versions of Puppet Agent didn't verify the peer in the SSL connection prior to downloading the CRL. This issue is resolved in Puppet Agent 6.4.0.

References

Affected packages

Git / github.com/puppetlabs/puppetserver

Affected ranges

Type
GIT
Repo
https://github.com/puppetlabs/puppetserver
Events
Introduced
8634c0e76ad3c9dbc18c0b7f8af93be025b2910e
Fixed
513e521930c2bcfbc290a2b67122d03c93f13a86
Database specific 
{
    "versions": [
        {
            "introduced": "6.0.0"
        },
        {
            "fixed": "6.4.0"
        }
    ]
}

Affected versions

5.*
5.3.6
5.3.7
5.3.8
6.*
6.0.0
6.0.1
6.0.2
6.0.3
6.0.4
6.1.0
6.2.0
6.2.1
6.3.0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-11751.json"