PT-2018-10801 · Puppet · Puppet Discovery

Published 2018-07-03 · Updated 2020-12-16 · CVE-2018-11746

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Puppet Discovery versions prior to 1.2.0

Description The issue allows WinRM connections to fall back to using basic auth over insecure channels if a HTTPS server is not available, potentially exposing login credentials used by Puppet Discovery when running against Windows hosts.

Recommendations For versions prior to 1.2.0, update to version 1.2.0 or later to resolve the issue. As a temporary workaround, consider configuring Puppet Discovery to only use HTTPS servers for WinRM connections to minimize the risk of credential exposure. Restrict access to sensitive Windows hosts until the update is applied.

Fix

Insufficiently Protected Credentials

Weakness Enumeration

CWE-522

Related Identifiers

CVE-2018-11746

Affected Products

Puppet Discovery

References · 4

• https://osv.dev/vulnerability/CVE-2018-11746 · Vendor Advisory
• https://puppet.com/security/cve/CVE-2018-11746 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-11746 · Security Note
• https://lists.apache.org/thread.html/rd0e44e8ef71eeaaa3cf3d1b8b41eb25894372e2995ec908ce7624d26%40%3Ccommits.pulsar.apache.org%3E · Note