← CVE Intelligence

CVE-2023-5309

Broken Session Management in Puppet Enterprise PUBLISHED

Description (CNA)

Versions of Puppet Enterprise prior to 2021.7.6 and 2023.5 contain a flaw which results in broken session management for SAML implementations.

Affected (CNA)

Vendor / productVersions
Puppet / Puppet Enterpriseaffected 2021.7.0 before 2021.7.6; affected 2023.0.0 before 2023.5

CWE

CWE-384

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.