Debian/puppet: medium 6.5
The default vhost configuration file in Puppet before 3.6.2 does not include the SSLCARevocationCheck directive, which might allow remote attackers to obtain sensitive information via a revoked certif
Action: Upgrade puppet to 3.7.0-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.7.0-1 | - |
Fixed versions
| 3.7.0-1 |
Sources
published · modified · JSON