CVE-2013-4955: Input Validation
Open redirect vulnerability in the login page in Puppet Enterprise before 3.0.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the service parameter.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2013-4955?
CVE-2013-4955 is classified as a medium severity vulnerability due to its potential for phishing attacks.
How do I fix CVE-2013-4955?
To fix CVE-2013-4955, you should upgrade to Puppet Enterprise version 3.0.1 or later.
Who is affected by CVE-2013-4955?
CVE-2013-4955 affects users of Puppet Enterprise versions prior to 3.0.1 and specific versions 2.5.1, 2.5.2, 2.8.0, 2.8.1, 2.8.2, and 2.8.3.
What type of vulnerability is CVE-2013-4955?
CVE-2013-4955 is an open redirect vulnerability that allows attackers to redirect users to malicious sites.
How can CVE-2013-4955 be exploited?
CVE-2013-4955 can be exploited by attackers crafting a malicious URL in the service parameter of the login page.