Medium severity6.5NVD Advisory· Published Oct 2, 2018· Updated Jun 17, 2026
CVE-2018-11750
CVE-2018-11750
Description
Previous releases of the Puppet cisco_ios module did not validate a host's identity before starting a SSH connection. As of the 0.4.0 release of cisco_ios, host key checking is enabled by default.
Affected products
2<0.4.0+ 1 more
- (no CPE)range: <0.4.0
- (no CPE)range: <0.4.0
Patches
Vulnerability mechanics
References
2- exchange.xforce.ibmcloud.com/vulnerabilities/150978nvdVendor Advisory
- puppet.com/security/cve/CVE-2018-11750nvdVendor Advisory
News mentions
0No linked articles in our index yet.