2 CVEs publicados el 2022-05-13 · CVSS máximo 9.8/10.
Productos afectados (catálogo NVD)
puppet/discovery
CVEs de este lote
| CVE | Severidad | CVSS | EPSS | Estado | Descripción |
|---|---|---|---|---|---|
| CVE-2018-11747 | CRITICAL | 9.8 | 0.7% | Previously, Puppet Discovery was shipped with a default generated TLS certificate in the nginx container. | |
| CVE-2018-11746 | HIGH | 8.6 | 1.4% | In Puppet Discovery prior to 1.2.0, when running Discovery against Windows hosts, WinRM connections can fall back to using basic auth over insecure channels if a HTTPS server is not available. |