← All advisories

Medium severity4.4NVD Advisory· Published Oct 3, 2023· Updated Jun 17, 2026

CVE-2023-5255

CVE-2023-5255

Description

For certificates that utilize the auto-renew feature in Puppet Server, a flaw exists which prevents the certificates from being revoked.

Affected products

5

Puppet (software)/Puppet Enterprise2 versions
cpe:2.3:a:puppet:puppet_enterprise:2023.3:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:puppet:puppet_enterprise:2023.3:*:*:*:*:*:*:*
- (no CPE)range: Puppet Enterprise 2023.3
Puppet (software)/Puppet Server3 versions
cpe:2.3:a:puppet:puppet_server:8.2.0:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:puppet:puppet_server:8.2.0:*:*:*:*:*:*:*
- cpe:2.3:a:puppet:puppet_server:8.2.1:*:*:*:*:*:*:*
- (no CPE)

Patches

Vulnerability mechanics

References

1

www.puppet.com/security/cve/cve-2023-5255-denial-service-revocation-auto-renewed-certificatesnvdVendor Advisory

News mentions

0

No linked articles in our index yet.