Versions of Puppet Enterprise prior to 2021.7.6 and 2023.5 contain a flaw which results in broken session management for SAML implementations.
2023-11-07T19:15:12.503
2024-11-21T08:41:30.110
Modified
CVSSv3.1: 6.8 (MEDIUM)
| Type | Vendor | Product | Version/Range | Vulnerable? |
|---|---|---|---|---|
| Application | puppet | puppet_enterprise | < 2021.7.6 | Yes |
| Application | puppet | puppet_enterprise | < 2023.5.0 | Yes |