CVE-2016-5715

MEDIUM

Puppet Enterprise <2016.4.0 - Open Redirect

Title source: llm

Description

Open redirect vulnerability in the Console in Puppet Enterprise 2015.x and 2016.x before 2016.4.0 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a // (slash slash) followed by a domain in the redirect parameter. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-6501.

References (5)

[Exploit, Third Party Advisory] http://hyp3rlinx.altervista.org/advisories/PUPPET-AUTHENTICATION-REDIRECT.txt

[Exploit, Third Party Advisory, VDB Entry] http://packetstormsecurity.com/files/139302/Puppet-Enterprise-Web-Interface-Open-Redirect.html

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/93846

[Vendor Advisory] https://puppet.com/security/cve/cve-2016-5715

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/archive/1/539618/100/0/threaded

Scores

CVSS v3 6.1

EPSS 0.0069

EPSS Percentile 71.5%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Classification

CWE

CWE-601

Status published

Affected Products (2)

puppet/puppet_enterprise < 2015.3.3

n/a/n/a

Timeline

Published Jan 12, 2017

Tracked Since Feb 18, 2026