CVE-2013-4965
Puppet Enterprise before 3.1.0 does not properly restrict the number of authentication attempts by a console account, which makes it easier for remote attackers to bypass intended access restrictions via a brute-force attack.
- Score
- CVSS 2.0 5.0 Medium
- Status
- Modified - cve@mitre.org
- Published
- 2013-10-25
- Last modified
- 2024-09-16
- Weaknesses
- CWE-287
Affected products
References
- http://osvdb.org/98640
- http://puppetlabs.com/security/cve/cve-2013-4965
