Not rated
CVE-2018-11751 Previous versions of Puppet Agent didn't verify the peer in the SSL connection prior to downloading the CRL
Description
Previous versions of Puppet Agent didn't verify the peer in the SSL connection prior to downloading the CRL. This issue is resolved in Puppet Agent 6.4.0.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Puppet Agent, Puppet | Versions not published |