CVE-2016-2786 | BDVDB-2026-76354 Detail

Description#

The pxp-agent component in Puppet Enterprise 2015.3.x before 2015.3.3 and Puppet Agent 1.3.x before 1.3.6 does not properly validate server certificates, which might allow remote attackers to spoof brokers and execute arbitrary commands via a crafted certificate.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://puppet.com/security/cve/CVE-2016-2786
https://security.gentoo.org/glsa/201606-02

Exploit#

No public exploit known

History#

Version 12016-06-10Record published in the CVE List.
Version 22024-08-05Most recent update recorded in the CVE List.