CVE-2021-27018 Vulnerability Details

  /     /     /  

CVE-2021-27018 Metadata Quick Info

CVE Published: 30/08/2021 | CVE Updated: 03/08/2024 | CVE Year: 2021
Source: puppet | Vendor: n/a | Product: Puppet Remediate
Status : PUBLISHED

---

CVE-2021-27018 Description

The mechanism which performs certificate validation was discovered to have a flaw that resulted in certificates signed by an internal certificate authority to not be properly validated. This issue only affects clients that are configured to utilize Tenable.sc as the vulnerability data source.

Metrics

CVSS Version: 3.1 | Base Score: n/a
Vector: n/a

l➤ Exploitability Metrics:
    Attack Vector (AV)*
    Attack Complexity (AC)*
    Privileges Required (PR)*
    User Interaction (UI)*
    Scope (S)*

l➤ Impact Metrics:
    Confidentiality Impact (C)*
    Integrity Impact (I)*
    Availability Impact (A)*

Weakness Enumeration (CWE)

CWE-ID:
CWE Name: Improper Verification of Cryptographic Signature
Source: n/a

Common Attack Pattern Enumeration and Classification (CAPEC)

CAPEC-ID:
CAPEC Description: