Back

MEDIUM

puppet-agent: Puppet Agent does not properly verify SSL connection when downloading a CRL

Published Dec 16, 2019

Description

Previous versions of Puppet Agent didn't verify the peer in the SSL connection prior to downloading the CRL. This issue is resolved in Puppet Agent 6.4.0.

Affected products

Remediation

Red Hat statement

Red Hat Update Infrastructure 3 is in Maintenance Support phase and product only fixing Critical or Important impact flaws. Please refer lifecycle page for more details: https://access.redhat.com/support/policy/updates/rhui

References (6)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner puppet
Published Dec 16, 2019
Updated Aug 5, 2024
Reserved Jun 5, 2018
NVD
Status Modified
Modified Jun 17, 2026
Red Hat
Severity Low
Public date Dec 12, 2019