CVE-2016-5716

Puppet / Puppet Enterprise PUBLISHED

Description (CNA)

The console in Puppet Enterprise 2015.x and 2016.x prior to 2016.4.0 includes unsafe string reads that potentially allows for remote code execution on the console node.

Affected (CNA)

Vendor / product	Versions
Puppet / Puppet Enterprise	affected PE < 2016.4.0

CWE

No CWE identifiers supplied.

References

https://puppet.com/security/cve/pe-console-oct-2016

ADP enrichment

CVE

No English description supplied.

https://puppet.com/security/cve/pe-console-oct-2016