CVE-2018-11747

CVE-2018-11747: vulnerability in Puppet Discovery

Published · Updated

Follow this CVE+ Monitor Puppet Discovery

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 0.7%
Previously, Puppet Discovery was shipped with a default generated TLS certificate in the nginx container. In version 1.4.0, a unique certificate will be generated on installation or the user will be able to provide their own TLS certificate for ingress.
Affected products
Puppet · Puppet Discovery
Related CVEs — Puppet Discovery

In the same product, most dangerous first.

CVE-2018-11746HIGHPuppet Discovery can leak authentication informationEPSS 1.4%