CVSS 3 Base Score:
4.4

Posted On:

Assessed Risk Level:
Medium

For certificates that utilize the auto-renew feature in Puppet Server, a flaw exists which prevents the certificates from being revoked.  

Status:

Affected software versions:
  • Puppet Enterprise 2023.3
  • Puppet Server 8.2.0 and 8.2.1 
Resolved in:
  • Puppet Enterprise 2023.4 
  • Puppet Server 8.2.3