CVE-2023-5309

CVSS 3.1 Score 9.8 of 10 (high)

Details

Published Nov 7, 2023

Updated: Nov 15, 2023

CWE ID 384

Summary

CVE-2023-5309 refers to a vulnerability in Puppet Enterprise versions prior to 2021.7.6 and 2023.5. This issue causes broken session management for Single Sign-On (SSO) implementations using Security Assertion Markup Language (SAML). As a result, unauthorized access to protected resources may occur, posing a significant security risk. Users are strongly advised to update their Puppet Enterprise installations to the latest versions to mitigate this vulnerability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Puppet Enterprise

Affected Vendors

Puppet Labs

Advisories, Assessments, and Mitigations

https://app.recordedfuture.com/live/sc/entity/s1gk68
https://www.cve.org/CVERecord?id=CVE-2023-5309
https://nvd.nist.gov/vuln/detail/CVE-2023-5309

Back to Vulnerability Database