Threats tagged 'ghsa-5jqj-9p78-vmh3'

A vulnerability in the certificate-name matching logic of trapperkeeper-authorization, used by Puppet Server, allows clients with CA-signed certificates whose names extend or shorten an authorized hostname to be improperly authorized. This flaw enables impersonation of other nodes and, in Puppet Enterprise, unauthorized access to certificate-authority administration and remote command execution on managed nodes. Exploitation requires a certificate with a colliding name issued by the certificate authority through approval or autosign.