CVE-2013-4962

no score yetEPSS 1.2%

puppet puppet enterprise: no CVSS score yet. EPSS 1.2% chance of exploitation in the next 30 days.

The reset password page in Puppet Enterprise before 3.0.1 does not force entry of the current password, which allows attackers to modify user passwords by leveraging session hijacking, an unattended workstation, or other vectors.

EPSS: 1.2% chance of exploitation in the next 30 days; higher than 68% of CVEs (scores of 2026-10-31)
CWE: CWE-255
Published: 2013-08-20
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

puppet:puppet_enterprise

References

http://puppetlabs.com/security/cve/cve-2013-4962/
http://puppetlabs.com/security/cve/cve-2013-4962/

Check your stack JSON