PT-2020-3687 · Puppet+2 · Puppet Agent+3
Published
2020-02-18
·
Updated
2021-12-30
·
CVE-2020-7942
CVSS v2.0
6.8
Medium
| Vector | AV:N/AC:L/Au:S/C:C/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
Puppet versions prior to 6.13.0
Puppet Agent versions prior to 6.13.0
Puppet versions 5.5.x prior to 5.5.19
Puppet Agent versions 5.5.x prior to 5.5.19
Description
The issue is related to errors in the certificate authentication procedure, allowing a remote attacker to gain unauthorized access to protected information. Previously, Puppet operated on a model where a node with a valid certificate was entitled to all information in the system, and a compromised certificate allowed access to everything in the infrastructure. When a node's catalog falls back to the
default node, the catalog can be retrieved for a different node by modifying facts for the Puppet run.Recommendations
For Puppet versions prior to 6.13.0, set
strict hostname checking = true in puppet.conf on your Puppet master to ensure secure behavior.
For Puppet Agent versions prior to 6.13.0, set strict hostname checking = true in puppet.conf on your Puppet master to ensure secure behavior.
For Puppet versions 5.5.x prior to 5.5.19, set strict hostname checking = true in puppet.conf on your Puppet master to ensure secure behavior.
For Puppet Agent versions 5.5.x prior to 5.5.19, set strict hostname checking = true in puppet.conf on your Puppet master to ensure secure behavior.Exploit
Fix
Improper Certificate Validation
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Debian
Puppet
Puppet Agent
Suse