CVE-2018-11749
First published: Fri Aug 24 2018(Updated: )
When users are configured to use startTLS with RBAC LDAP, at login time, the user's credentials are sent via plaintext to the LDAP server. This affects Puppet Enterprise 2018.1.3, 2017.3.9, and 2016.4.14, and is fixed in Puppet Enterprise 2018.1.4, 2017.3.10, and 2016.4.15. It scored an 8.5 CVSS score.
Credit: security@puppet.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Puppet Puppet Enterprise | <=2016.4.14 | |
| Puppet Puppet Enterprise | >=2017.3.0<=2017.3.9 | |
| Puppet Puppet Enterprise | >=2018.1.0<=2018.1.3 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2018-11749?
The severity of CVE-2018-11749 is critical with a CVSS score of 9.8.
Which versions of Puppet Enterprise are affected by CVE-2018-11749?
Puppet Enterprise versions 2018.1.3, 2017.3.9, and 2016.4.14 are affected by CVE-2018-11749.
How are user credentials sent in plaintext in CVE-2018-11749?
When using startTLS with RBAC LDAP, user credentials are sent in plaintext to the LDAP server.
How can I fix CVE-2018-11749?
CVE-2018-11749 can be fixed by upgrading to Puppet Enterprise versions 2018.1.4, 2017.3.10, or 2016.4.15.
What is the Common Weakness Enumeration (CWE) ID for CVE-2018-11749?
The Common Weakness Enumeration (CWE) ID for CVE-2018-11749 is 319.
- collector/nvd-index
- agent/severity
- agent/weakness
- agent/references
- agent/author
- agent/description
- agent/type
- agent/tags
- agent/event
- agent/last-modified-date
- vendor/puppet
- canonical/puppet puppet enterprise
- version/puppet puppet enterprise/2016.4.14
- version/puppet puppet enterprise/2017.3.0
- version/puppet puppet enterprise/2017.3.9
- version/puppet puppet enterprise/2018.1.0
- version/puppet puppet enterprise/2018.1.3