VULNERABILITY INTELLIGENCE

CVE-2015-4100

CVSS score6.8 MEDIUM

EPSS probability0.70%

CISA KEVNot currently listed

Published2017-12-21

Last modified2026-06-17

Description

Puppet Enterprise 3.7.x and 3.8.0 might allow remote authenticated users to manage certificates for arbitrary nodes by leveraging a client certificate trusted by the master, aka a "Certificate Authority Reverse Proxy Vulnerability."