CVE-2015-5686 Parts of the Puppet Enterprise Console 3.x were found to be susceptible to clickjacking and CSRF (Cross-Site Request Forgery) attacks. This would allow an attacker to redirect user input to an untrust...
HighCVSS 8.8
EPSS 0.45%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Parts of the Puppet Enterprise Console 3.x were found to be susceptible to clickjacking and CSRF (Cross-Site Request Forgery) attacks. This would allow an attacker to redirect user input to an untrusted site or hijack a user session.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| puppet enterprise | >= 3.0.0, < 2015.2.0 | 2015.2.0 |
References
- puppet.com vendor-advisory