Puppet Puppet Enterprise

• CVE-2023-5309 Medium 6.8 Broken Session Management in Puppet Enterprise 0.5%
• CVE-2023-5255 Medium 4.4 Denial of Service for Revocation of Auto Renewed Certificates 0.5%
• CVE-2023-2530 Unrated A privilege escalation allowing remote code execution was discovered in the orchestration service. 1.1%
• CVE-2023-1894 Medium 5.3 A Regular Expression Denial of Service (ReDoS) issue was discovered in Puppet Server 7.9.2 certificate validation. An issue related to specifically crafted certificate names significantly slowed down 0.4%