QwikSec

Security Database

CVE

CWE

Training

CVE-2018-11747

Published: Mar 17, 2019

Modified: Aug 5, 2024

PUBLISHED

Description

Previously, Puppet Discovery was shipped with a default generated TLS certificate in the nginx container. In version 1.4.0, a unique certificate will be generated on installation or the user will be able to provide their own TLS certificate for ingress.

Vendor	Product	Versions
Puppet	Puppet Discovery	affected `all versions prior to 1.4.0`

References

https://puppet.com/security/cve/CVE-2018-11747

x_refsource_CONFIRM

[pulsar-commits] 20201215 [GitHub] [pulsar] yanshuchong opened a new issue #8967: CVSS issue list

mailing-list

x_refsource_MLIST

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.