CVE-2016-5715: Medium severity puppet Puppet Enterprise vulnerability
Open redirect vulnerability in the Console in Puppet Enterprise 2015.x and 2016.x before 2016.4.0 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a // (slash slash) followed by a domain in the redirect parameter. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-6501.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2016-5715?
CVE-2016-5715 is classified as a medium severity vulnerability due to its potential to facilitate phishing attacks.
How do I fix CVE-2016-5715?
To fix CVE-2016-5715, upgrade Puppet Enterprise to version 2016.4.0 or later.
What type of vulnerability is CVE-2016-5715?
CVE-2016-5715 is an open redirect vulnerability that allows attackers to redirect users to arbitrary web sites.
Which versions of Puppet Enterprise are affected by CVE-2016-5715?
CVE-2016-5715 affects Puppet Enterprise versions 2015.x and 2016.x before 2016.4.0.
What can attackers do with CVE-2016-5715?
Attackers can exploit CVE-2016-5715 to redirect users, enabling phishing attacks.