Vulnerability in Puppet Peadm Forge Module
CVE-2024-9160
In versions of the PEADM Forge Module prior to 3.24.0 a security misconfiguration was discovered.
Vulnerability class: Improper Certificate Validation
EPSS: 0.002 (6.2th percentile) — read the EPSS interpretation.
Affected products
- Puppet Peadm Forge Module — versions 3.8.0
Weakness classification (CWE)
Public proof-of-concept exploits
References
Frequently asked questions
- What is CVE-2024-9160?
- CVE-2024-9160 is a vulnerability in Puppet Peadm Forge Module, classified under Improper Certificate Validation. Published 2024-09-27.
- Is CVE-2024-9160 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.