CVE-2020-7942Improper Certificate Validation in Puppet

Severity
6.5MEDIUMNVD
EPSS
0.1%
top 69.21%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedFeb 19
Latest updateApr 13

Description

Previously, Puppet operated on a model that a node with a valid certificate was entitled to all information in the system and that a compromised certificate allowed access to everything in the infrastructure. When a node's catalog falls back to the `default` node, the catalog can be retrieved for a different node by modifying facts for the Puppet run. This issue can be mitigated by setting `strict_hostname_checking = true` in `puppet.conf` on your Puppet master. Puppet 6.13.0 and 5.5.19 changes

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:NExploitability: 2.8 | Impact: 3.6

Affected Packages5 packages

NVDpuppet/puppet_agent5.5.05.5.19+1
CVEListV5puppet/puppet_agent4 versions+3
NVDpuppet/puppet5.5.05.5.19+1
RubyGemspuppet/puppet6.0.06.13.0+1
CVEListV5puppet/puppet4 versions+3

🔴Vulnerability Details

4
OSV
Improper Certificate Validation in Puppet2021-04-13
GHSA
Improper Certificate Validation in Puppet2021-04-13
CVEList
CVE-2020-7942: Previously, Puppet operated on a model that a node with a valid certificate was entitled to all information in the system and that a compromised certi2020-02-19
OSV
CVE-2020-7942: Previously, Puppet operated on a model that a node with a valid certificate was entitled to all information in the system and that a compromised certi2020-02-19

📋Vendor Advisories

2
Red Hat
puppet: Arbitrary catalog retrieval2020-02-18
Debian
CVE-2020-7942: puppet - Previously, Puppet operated on a model that a node with a valid certificate was ...2020

💬Community

4
Bugzilla
CVE-2020-7942 puppet: Arbitrary catalog retrieval [openstack-rdo]2020-03-24
Bugzilla
CVE-2020-7942 puppet: Arbitrary catalog retrieval [fedora-all]2020-03-24
Bugzilla
CVE-2020-7942 puppet: Arbitrary catalog retrieval [epel-7]2020-03-24
Bugzilla
CVE-2020-7942 puppet: Arbitrary catalog retrieval2020-03-24
CVE-2020-7942 — Improper Certificate Validation | cvebase