https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 07:46:12 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-106282 EUVD-2026-106282 https://cve.radiocsirt.org/vuln/euvd-2026-106282 https://cve.radiocsirt.org/vuln/fkie_cve-2013-2716 <p>Puppet Labs Puppet Enterprise before 2.8.0 does not use a &#34;randomized secret&#34; in the CAS client config file (cas_client_config.yml) when upgrading from older 1.2.x or 2.0.x versions, which allows remote attackers to obtain console access via a crafted cookie.</p> <p>Puppet Labs Puppet Enterprise before 2.8.0 does not use a &#34;randomized secret&#34; in the CAS client config file (cas_client_config.yml) when upgrading from older 1.2.x or 2.0.x versions, which allows remote attackers to obtain console access via a crafted cookie.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2013-2716 https://cve.radiocsirt.org/vuln/ghsa-6576-382v-5xmw <p>Puppet Labs Puppet Enterprise before 2.8.0 does not use a &#34;randomized secret&#34; in the CAS client config file (cas_client_config.yml) when upgrading from older 1.2.x or 2.0.x versions, which allows remote attackers to obtain console access via a crafted cookie.</p> <p>Puppet Labs Puppet Enterprise before 2.8.0 does not use a &#34;randomized secret&#34; in the CAS client config file (cas_client_config.yml) when upgrading from older 1.2.x or 2.0.x versions, which allows remote attackers to obtain console access via a crafted cookie.</p> https://cve.radiocsirt.org/vuln/ghsa-6576-382v-5xmw https://cve.radiocsirt.org/vuln/gsd-2013-2716 gsd-2013-2716 https://cve.radiocsirt.org/vuln/gsd-2013-2716