CVE-2018-11748

Previous releases of the Puppet device_manager module creates configuration files containing credentials that are world readable. This issue has been resolved as of device_manager 2.7.0.

Score

CVSS 3.0 7.8 High

Status

Modified - security@puppet.com

Published

2018-10-02

Last modified

2024-08-05

Weaknesses

CWE-522

Affected products

• Device Manager (Puppet)

References

• https://puppet.com/security/cve/CVE-2018-11748