{"action":"Upgrade puppet to 2.6.17 or later.","affected":[{"fixed":"2.6.17","introduced":"0"},{"fixed":"2.7.18","introduced":"2.7.0"}],"component":"puppet","cve_ids":["CVE-2012-3867"],"ecosystem":"RubyGems","epss":0.02453,"exploited":false,"fixed_versions":["2.6.17","2.7.18"],"ghsa_id":"GHSA-q44r-f2hm-v76v","id":"tcs_01M5KEMSWM45QQKVR2BK3YK22W","modified_at":"2024-11-29T05:40:48.956113Z","published_at":"2017-10-24T18:33:37Z","references":["https://osv.dev/vulnerability/GHSA-q44r-f2hm-v76v","https://nvd.nist.gov/vuln/detail/CVE-2012-3867","https://github.com/puppetlabs/puppet/commit/dfedaa5fa841ccf335245a748b347b7c7c236640","https://github.com/puppetlabs/puppet/commit/f3419620b42080dad3b0be14470b20a972f13c50","https://bugzilla.redhat.com/show_bug.cgi?id=839158","https://github.com/puppetlabs/puppet","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/puppet/CVE-2012-3867.yml","https://www.puppet.com/security/cve/cve-2012-3867-insufficient-input-validation","http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00006.html","http://lists.opensuse.org/opensuse-updates/2012-07/msg00036.html","http://puppetlabs.com/security/cve/cve-2012-3867","http://www.debian.org/security/2012/dsa-2511","http://www.ubuntu.com/usn/USN-1506-1"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-q44r-f2hm-v76v","url":"https://osv.dev/vulnerability/GHSA-q44r-f2hm-v76v"}],"summary":"Pupper does not properly restrict characters in Common Name field of Certificate Signing Request"}