Puppet · Puppet Discovery · CVE-2018-11747
**Name of the Vulnerable Software and Affected Versions**
Puppet Discovery versions prior to 1.4.0
**Description**
The issue concerns a default generated TLS certificate in the nginx container. Previously, Puppet Discovery was shipped with this default certificate. In version 1.4.0, a unique certificate will be generated on installation, or the user will be able to provide their own TLS certificate for ingress.
**Recommendations**
For versions prior to 1.4.0, update to version 1.4.0 to generate a unique TLS certificate on installation or provide your own TLS certificate for ingress.