CVE-2016-2787

—

CVSS 3.0

5.3 medium

EPSS

<1%p47

Published

Feb 13, 2017 (Feb 13, 2017)

Modified

Jun 17, 2026

Description

The Puppet Communications Protocol in Puppet Enterprise 2015.3.x before 2015.3.3 does not properly validate certificates for the broker node, which allows remote non-whitelisted hosts to prevent runs from triggering via unspecified vectors.

Vendors: puppet puppetlabs
Products: puppet enterprise
Weakness: CWE-284
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

NVD CVE.org GitHub PoCs EPSS (0.6%)

In the news0 stories

No ingested article mentions this CVE yet.