Skip to content
CVE PROGRAM SOURCE RECORD4.4 Medium

CVE-2023-5255

Denial of Service for Revocation of Auto Renewed Certificates

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
puppet

Description

For certificates that utilize the auto-renew feature in Puppet Server, a flaw exists which prevents the certificates from being revoked.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Puppet Puppet Enterprise

Default version status: unaffected

  • Puppet Enterprise 2023.3 to ≤ 2023.4affected
  • Puppet Server 8.2.0 to ≤ 8.2.3affected

References