Security Advisory

CVE-2018-11747

9.8
CRITICAL

Vulnerability Description

Previously, Puppet Discovery was shipped with a default generated TLS certificate in the nginx container. In version 1.4.0, a unique certificate will be generated on installation or the user will be able to provide their own TLS certificate for ingress.
Published Date March 21, 2019
Official Source NIST NVD Advisory