CVE-2013-2716

MEDIUM · CVSS 5 EPSS 1.32%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2013-04-10 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2013-2716

Severity

MEDIUM

CVSS

EPSS

1.32%

Original NVD Description

Puppet Labs Puppet Enterprise before 2.8.0 does not use a "randomized secret" in the CAS client config file (cas_client_config.yml) when upgrading from older 1.2.x or 2.0.x versions, which allows remote attackers to obtain console access via a crafted cookie.