CVE-2018-11749: Critical severity puppet enterprise vulnerability
Published Aug 24, 2018
·Updated
When users are configured to use startTLS with RBAC LDAP, at login time, the user's credentials are sent via plaintext to the LDAP server. This affects Puppet Enterprise 2018.1.3, 2017.3.9, and 2016.4.14, and is fixed in Puppet Enterprise 2018.1.4, 2017.3.10, and 2016.4.15. It scored an 8.5 CVSS score.
Affected Software
3 affected components
puppet Puppet Enterprise<=2016.4.14
puppet Puppet Enterprise>=2017.3.0<=2017.3.9
puppet Puppet Enterprise>=2018.1.0<=2018.1.3
Event History
Aug 24, 2018
CVE Published
via MITRE·01:00 PM
Data Sourced
via MITRE·01:00 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2018-11749?
The severity of CVE-2018-11749 is critical with a CVSS score of 9.8.
2
Which versions of Puppet Enterprise are affected by CVE-2018-11749?
Puppet Enterprise versions 2018.1.3, 2017.3.9, and 2016.4.14 are affected by CVE-2018-11749.
3
How are user credentials sent in plaintext in CVE-2018-11749?
When using startTLS with RBAC LDAP, user credentials are sent in plaintext to the LDAP server.
4
How can I fix CVE-2018-11749?
CVE-2018-11749 can be fixed by upgrading to Puppet Enterprise versions 2018.1.4, 2017.3.10, or 2016.4.15.
5
What is the Common Weakness Enumeration (CWE) ID for CVE-2018-11749?
The Common Weakness Enumeration (CWE) ID for CVE-2018-11749 is 319.