Read the docs
TI-2017-01580 Aliases CVE-2017-2299GHSA-9xmv-x9p2-vrmq

Improper certificate validation in puppetlabs-apache

Priority LOW 34CWE-295Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
Spoofing
Confidentiality · integrity · availability
High · None · None
Fix status
Will not fix Red Hat: no fix planned

Attack profile from CVSS 3.0 · NVD. Fix status from CNA and Red Hat. Impact type from CWE-295.

Summary

Versions of the puppetlabs-apache module prior to 1.11.1 and 2.1.0 make it very easy to accidentally misconfigure TLS trust. If you specify the `ssl_ca` parameter but do not specify the `ssl_certs_dir` parameter, a default will be provided for the `ssl_certs_dir` that will trust certificates from any of the system-trusted certificate authorities. This did not affect FreeBSD.

Why it matters now

EPSS 0.00848 58th percentileScored 2026-11-07
Fix Will not fix Red Hat: no fix planned

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
Puppetpuppetlabs-apacheprior to 1.11.1 and 2.1.0—No fix listedCNA
  • puppetlabs-apache VendorPuppet Affected prior to 1.11.1 and 2.1.0 Fixed in — No fix listed CNA

CPE configurations NVD · 26

CPEVersionsRoleVendor
cpe:2.3:a:puppet:puppetlabs-apache:0.0.4:*:*:*:*:puppet:*:*0.0.4VulnerablePuppet
cpe:2.3:a:puppet:puppetlabs-apache:0.4.0:*:*:*:*:puppet:*:*0.4.0VulnerablePuppet
cpe:2.3:a:puppet:puppetlabs-apache:0.6.0:*:*:*:*:puppet:*:*0.6.0VulnerablePuppet
cpe:2.3:a:puppet:puppetlabs-apache:0.7.0:*:*:*:*:puppet:*:*0.7.0VulnerablePuppet
cpe:2.3:a:puppet:puppetlabs-apache:0.8.0:*:*:*:*:puppet:*:*0.8.0VulnerablePuppet
cpe:2.3:a:puppet:puppetlabs-apache:0.8.1:*:*:*:*:puppet:*:*0.8.1VulnerablePuppet
cpe:2.3:a:puppet:puppetlabs-apache:0.9.0:*:*:*:*:puppet:*:*0.9.0VulnerablePuppet
cpe:2.3:a:puppet:puppetlabs-apache:0.10.0:*:*:*:*:puppet:*:*0.10.0VulnerablePuppet
cpe:2.3:a:puppet:puppetlabs-apache:0.11.0:*:*:*:*:puppet:*:*0.11.0VulnerablePuppet
cpe:2.3:a:puppet:puppetlabs-apache:1.0.0:*:*:*:*:puppet:*:*1.0.0VulnerablePuppet
  • cpe:2.3:a:puppet:puppetlabs-apache:0.0.4:*:*:*:*:puppet:*:* Versions 0.0.4 Vulnerable ·Puppet
  • cpe:2.3:a:puppet:puppetlabs-apache:0.4.0:*:*:*:*:puppet:*:* Versions 0.4.0 Vulnerable ·Puppet
  • cpe:2.3:a:puppet:puppetlabs-apache:0.6.0:*:*:*:*:puppet:*:* Versions 0.6.0 Vulnerable ·Puppet
  • cpe:2.3:a:puppet:puppetlabs-apache:0.7.0:*:*:*:*:puppet:*:* Versions 0.7.0 Vulnerable ·Puppet
  • cpe:2.3:a:puppet:puppetlabs-apache:0.8.0:*:*:*:*:puppet:*:* Versions 0.8.0 Vulnerable ·Puppet
  • cpe:2.3:a:puppet:puppetlabs-apache:0.8.1:*:*:*:*:puppet:*:* Versions 0.8.1 Vulnerable ·Puppet
  • cpe:2.3:a:puppet:puppetlabs-apache:0.9.0:*:*:*:*:puppet:*:* Versions 0.9.0 Vulnerable ·Puppet
  • cpe:2.3:a:puppet:puppetlabs-apache:0.10.0:*:*:*:*:puppet:*:* Versions 0.10.0 Vulnerable ·Puppet
  • cpe:2.3:a:puppet:puppetlabs-apache:0.11.0:*:*:*:*:puppet:*:* Versions 0.11.0 Vulnerable ·Puppet
  • cpe:2.3:a:puppet:puppetlabs-apache:1.0.0:*:*:*:*:puppet:*:* Versions 1.0.0 Vulnerable ·Puppet
Show 16 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:puppet:puppetlabs-apache:1.0.1:*:*:*:*:puppet:*:*1.0.1VulnerablePuppet
cpe:2.3:a:puppet:puppetlabs-apache:1.1.0:*:*:*:*:puppet:*:*1.1.0VulnerablePuppet
cpe:2.3:a:puppet:puppetlabs-apache:1.1.1:*:*:*:*:puppet:*:*1.1.1VulnerablePuppet
cpe:2.3:a:puppet:puppetlabs-apache:1.2.0:*:*:*:*:puppet:*:*1.2.0VulnerablePuppet
cpe:2.3:a:puppet:puppetlabs-apache:1.3.0:*:*:*:*:puppet:*:*1.3.0VulnerablePuppet
cpe:2.3:a:puppet:puppetlabs-apache:1.4.0:*:*:*:*:puppet:*:*1.4.0VulnerablePuppet
cpe:2.3:a:puppet:puppetlabs-apache:1.4.1:*:*:*:*:puppet:*:*1.4.1VulnerablePuppet
cpe:2.3:a:puppet:puppetlabs-apache:1.5.0:*:*:*:*:puppet:*:*1.5.0VulnerablePuppet
cpe:2.3:a:puppet:puppetlabs-apache:1.6.0:*:*:*:*:puppet:*:*1.6.0VulnerablePuppet
cpe:2.3:a:puppet:puppetlabs-apache:1.7.0:*:*:*:*:puppet:*:*1.7.0VulnerablePuppet
cpe:2.3:a:puppet:puppetlabs-apache:1.7.1:*:*:*:*:puppet:*:*1.7.1VulnerablePuppet
cpe:2.3:a:puppet:puppetlabs-apache:1.8.0:*:*:*:*:puppet:*:*1.8.0VulnerablePuppet
cpe:2.3:a:puppet:puppetlabs-apache:1.8.1:*:*:*:*:puppet:*:*1.8.1VulnerablePuppet
cpe:2.3:a:puppet:puppetlabs-apache:1.10.0:*:*:*:*:puppet:*:*1.10.0VulnerablePuppet
cpe:2.3:a:puppet:puppetlabs-apache:1.11.0:*:*:*:*:puppet:*:*1.11.0VulnerablePuppet
cpe:2.3:a:puppet:puppetlabs-apache:2.0.0:*:*:*:*:puppet:*:*2.0.0VulnerablePuppet
  • cpe:2.3:a:puppet:puppetlabs-apache:1.0.1:*:*:*:*:puppet:*:* Versions 1.0.1 Vulnerable ·Puppet
  • cpe:2.3:a:puppet:puppetlabs-apache:1.1.0:*:*:*:*:puppet:*:* Versions 1.1.0 Vulnerable ·Puppet
  • cpe:2.3:a:puppet:puppetlabs-apache:1.1.1:*:*:*:*:puppet:*:* Versions 1.1.1 Vulnerable ·Puppet
  • cpe:2.3:a:puppet:puppetlabs-apache:1.2.0:*:*:*:*:puppet:*:* Versions 1.2.0 Vulnerable ·Puppet
  • cpe:2.3:a:puppet:puppetlabs-apache:1.3.0:*:*:*:*:puppet:*:* Versions 1.3.0 Vulnerable ·Puppet
  • cpe:2.3:a:puppet:puppetlabs-apache:1.4.0:*:*:*:*:puppet:*:* Versions 1.4.0 Vulnerable ·Puppet
  • cpe:2.3:a:puppet:puppetlabs-apache:1.4.1:*:*:*:*:puppet:*:* Versions 1.4.1 Vulnerable ·Puppet
  • cpe:2.3:a:puppet:puppetlabs-apache:1.5.0:*:*:*:*:puppet:*:* Versions 1.5.0 Vulnerable ·Puppet
  • cpe:2.3:a:puppet:puppetlabs-apache:1.6.0:*:*:*:*:puppet:*:* Versions 1.6.0 Vulnerable ·Puppet
  • cpe:2.3:a:puppet:puppetlabs-apache:1.7.0:*:*:*:*:puppet:*:* Versions 1.7.0 Vulnerable ·Puppet
  • cpe:2.3:a:puppet:puppetlabs-apache:1.7.1:*:*:*:*:puppet:*:* Versions 1.7.1 Vulnerable ·Puppet
  • cpe:2.3:a:puppet:puppetlabs-apache:1.8.0:*:*:*:*:puppet:*:* Versions 1.8.0 Vulnerable ·Puppet
  • cpe:2.3:a:puppet:puppetlabs-apache:1.8.1:*:*:*:*:puppet:*:* Versions 1.8.1 Vulnerable ·Puppet
  • cpe:2.3:a:puppet:puppetlabs-apache:1.10.0:*:*:*:*:puppet:*:* Versions 1.10.0 Vulnerable ·Puppet
  • cpe:2.3:a:puppet:puppetlabs-apache:1.11.0:*:*:*:*:puppet:*:* Versions 1.11.0 Vulnerable ·Puppet
  • cpe:2.3:a:puppet:puppetlabs-apache:2.0.0:*:*:*:*:puppet:*:* Versions 2.0.0 Vulnerable ·Puppet

Remediation

No fixed version listed by the sources yet.

Vendor assessments

Red Hat

Red Hat rating: Low. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat OpenStack Platform 10 (Newton)AffectedNo fix planned: Will not fix
Red Hat OpenStack Platform 11 (Ocata)AffectedNo fix planned: Will not fix
Not affected: 2 products
  • Red Hat OpenStack Platform 12 (Pike)
  • Red Hat Satellite 6

Timeline

  1. 2026-10-02 Threatist record created from CVE-2017-2299
  2. 2026-10-03 Alias added: GHSA-9xmv-x9p2-vrmq

References

Advisory 1

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences