CVE-2013-1399 | BDVDB-2026-60351 Detail

Description#

Multiple cross-site request forgery (CSRF) vulnerabilities in the (1) node request management, (2) live management, and (3) user administration components in the console in Puppet Enterprise (PE) before 2.7.1 allow remote attackers to hijack the authentication of unspecified victims via unknown vectors.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://puppetlabs.com/security/cve/cve-2013-1399

Exploit#

No public exploit known

History#

Version 12014-03-14Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.