Search Results | AttackerKB

Show filters

Clear All

Disclosure Year Disclosure Month

Collection Command and Control Credential Access Defense Evasion Discovery Execution Exfiltration Impact Initial Access Lateral Movement Persistence Privilege Escalation

1 Total Results

Displaying 1-1 of 1

Attacker Value

Unknown

Puppet Discovery can leak authentication information

Disclosure Date: July 03, 2018 (last updated November 08, 2023)

In Puppet Discovery prior to 1.2.0, when running Discovery against Windows hosts, WinRM connections can fall back to using basic auth over insecure channels if a HTTPS server is not available. This can expose the login credentials being used by Puppet Discovery.

1 Total Results

Displaying 1-1 of 1

Unknown

Puppet Discovery can leak authentication information

Quick Cookie Notification