CVE-2023-1894 Vulnerability Details

  /     /     /  

CVE-2023-1894 Metadata Quick Info

CVE Published: 04/05/2023 | CVE Updated: 02/08/2024 | CVE Year: 2023
Source: puppet | Vendor: Puppet | Product: Puppet Enterprise
Status : PUBLISHED

---

CVE-2023-1894 Description

A Regular Expression Denial of Service (ReDoS) issue was discovered in Puppet Server 7.9.2 certificate validation. An issue related to specifically crafted certificate names significantly slowed down server operations.

Metrics

CVSS Version: 3.1 | Base Score: n/a
Vector: n/a

l➤ Exploitability Metrics:
    Attack Vector (AV)*
    Attack Complexity (AC)*
    Privileges Required (PR)*
    User Interaction (UI)*
    Scope (S)*

l➤ Impact Metrics:
    Confidentiality Impact (C)*
    Integrity Impact (I)*
    Availability Impact (A)*

Weakness Enumeration (CWE)

CWE-ID:
CWE Name: CWE-1333 Inefficient Regular Expression Complexity
Source: Puppet

Common Attack Pattern Enumeration and Classification (CAPEC)

CAPEC-ID:
CAPEC Description:


Source: NVD (National Vulnerability Database).