Medium severity5.4NVD Advisory· Published Dec 16, 2019· Updated Jun 17, 2026

CVE-2018-11751

Description

Previous versions of Puppet Agent didn't verify the peer in the SSL connection prior to downloading the CRL. This issue is resolved in Puppet Agent 6.4.0.

Affected products

Puppet (software)/Puppet Server
cpe:2.3:a:puppet:puppet_server:*:*:*:*:*:*:*:*
Range: >=6.0.0,<6.4.0
Puppet/Puppet Agentdescription
Puppet (software)/Puppet Agentllm-fuzzy
Range: <6.4.0

Patches

Vulnerability mechanics

References

puppet.com/security/cve/CVE-2018-11751nvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.351
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000