Critical severity9.8NVD Advisory· Published Mar 21, 2019· Updated Jun 17, 2026

CVE-2018-11747

Description

Previously, Puppet Discovery was shipped with a default generated TLS certificate in the nginx container. In version 1.4.0, a unique certificate will be generated on installation or the user will be able to provide their own TLS certificate for ingress.

Affected products

Puppet (software)/Discovery
cpe:2.3:a:puppet:discovery:*:*:*:*:*:*:*:*
Range: <1.4.0
Puppet (software)/Puppet Discoveryllm-fuzzy2 versions
<1.4.0+ 1 more
- (no CPE)range: <1.4.0
- (no CPE)range: all versions prior to 1.4.0

Patches

Vulnerability mechanics

References

puppet.com/security/cve/CVE-2018-11747nvdVendor Advisory
lists.apache.org/thread.html/rd0e44e8ef71eeaaa3cf3d1b8b41eb25894372e2995ec908ce7624d26%40%3Ccommits.pulsar.apache.org%3Envd

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000