CVE-2015-7330

CVSS 3 Base Score:

8.8

Posted On:

December 29, 2015

Assessed Risk Level:

High

Puppet Enterprise 2015.3 contained a misconfiguration in which non-whitelisted hosts were permitted to communicate over the Puppet communications protocol and potentially control Puppet. This issue is fixed in 2015.3.1.

Status:

Affected software versions:Resolved in: