It was discovered that incorrect validation of hostname ACLs in the authorisation service of Trapperkeeper, a service framework used by Puppet servers, could allow a Puppet client to download the catalogue of a different host. https://security-tracker.debian.org/tracker/DSA-6609-1 Weiterlesen: DSA-6609-1 trapperkeeper-authorization-clojure - security update
Intelligence View
⚡ tsecurity.de Intelligence
DSA-6609-1 trapperkeeper-authorization-clojure - security update
It was discovered that incorrect validation of hostname ACLs in the authorisation service of Trapperkeeper, a service framework used by Puppet servers, could…
Intelligence Digest — free The top security news daily · unsubscribe anytime