Puppet Discovery
2 CVEs affecting Puppet Discovery. Latest disclosed: 2019-03-21. Critical: 1, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-11747 | Critical | 9.8 | 2019-03-21 | Previously, Puppet Discovery was shipped with a default generated TLS certificate in the nginx container. In version 1.4.0, a unique certificate will be genera… |
CVE-2018-11746 | High | 8.6 | 2018-07-03 | In Puppet Discovery prior to 1.2.0, when running Discovery against Windows hosts, WinRM connections can fall back to using basic auth over insecure channels if… |