[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fBgHPW3IuLFnUOsT4lvCrZXcWiLDY17W1ediwLyibJBI":3,"g5a-risk:CVE-2017-2299":240},{"success":4,"data":5,"meta":238},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":39,"epssPercentile":15,"epssTimeSeries":40,"severity":41,"affectedProducts":42,"affectedProductsCount":123,"references":124,"referencesCount":140,"weaknesses":141,"weaknessesCount":150,"isActivelyExploited":151,"cisaInfo":15,"otxData":15,"relatedBlogPosts":152,"seoMetadata":153,"configurations":178,"relatedVendorCves":236,"notableEvents":237},"CVE-2017-2299","What is CVE-2017-2299?","Versions of the puppetlabs-apache module prior to 1.11.1 and 2.1.0 make it very easy to accidentally misconfigure TLS trust. If you specify the `ssl_ca` parameter but do not specify the `ssl_certs_dir` parameter, a default will be provided for the `ssl_certs_dir` that will trust certificates from any of the system-trusted certificate authorities. This did not affect FreeBSD.","Versions of the puppetlabs-apache module prior to 1.11.1 and 2.1.0 make it very easy to accidentally misconfigure TLS trust. If you specify the `ssl_ca` para...","2017-09-15T18:29:00.26","2025-04-20T01:37:25.86",7.5,"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":16,"CVSSMetricV2":29,"CVSSMetricV40":15},null,[17],{"Source":18,"Type":19,"CVSSData":20,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":21,"VectorString":13,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":24,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":26,"IntegrityImpact":24,"AvailabilityImpact":24,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"TemporalSeverity":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"ModifiedAttackVector":15,"ModifiedAttackComplexity":15,"ModifiedPrivilegesRequired":15,"ModifiedUserInteraction":15,"ModifiedScope":15,"ModifiedConfidentialityImpact":15,"ModifiedIntegrityImpact":15,"ModifiedAvailabilityImpact":15,"EnvironmentalScore":15,"EnvironmentalSeverity":15},"3.0","NETWORK","LOW","NONE","UNCHANGED","HIGH",3.9,3.6,[30],{"Source":18,"Type":19,"CVSSData":31,"BaseSeverity":36,"ExploitabilityScore":37,"ImpactScore":38,"ACInsufInfo":15,"ObtainAllPrivilege":15,"ObtainUserPrivilege":15,"ObtainOtherPrivilege":15,"UserInteractionRequired":15},{"Version":32,"VectorString":33,"AccessVector":22,"AccessComplexity":23,"Authentication":24,"ConfidentialityImpact":34,"IntegrityImpact":24,"AvailabilityImpact":24,"BaseScore":35,"BaseSeverity":15,"Exploitability":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"CollateralDamagePotential":15,"TargetDistribution":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"EnvironmentalScore":15},"2.0","AV:N\u002FAC:L\u002FAu:N\u002FC:P\u002FI:N\u002FA:N","PARTIAL",5,"MEDIUM",10,2.9,0.00848,[39,39,39,39,39,39,39],"High",[43,48,51,54,57,60,63,66,69,72,75,78,81,84,87,90,93,96,99,102,105,108,111,114,117,120],{"vendor":44,"product":45,"version":46,"criteria":47,"vulnerable":4},"puppet","puppetlabs-apache","0.0.4","cpe:2.3:a:puppet:puppetlabs-apache:0.0.4:*:*:*:*:puppet:*:*",{"vendor":44,"product":45,"version":49,"criteria":50,"vulnerable":4},"0.4.0","cpe:2.3:a:puppet:puppetlabs-apache:0.4.0:*:*:*:*:puppet:*:*",{"vendor":44,"product":45,"version":52,"criteria":53,"vulnerable":4},"0.6.0","cpe:2.3:a:puppet:puppetlabs-apache:0.6.0:*:*:*:*:puppet:*:*",{"vendor":44,"product":45,"version":55,"criteria":56,"vulnerable":4},"0.7.0","cpe:2.3:a:puppet:puppetlabs-apache:0.7.0:*:*:*:*:puppet:*:*",{"vendor":44,"product":45,"version":58,"criteria":59,"vulnerable":4},"0.8.0","cpe:2.3:a:puppet:puppetlabs-apache:0.8.0:*:*:*:*:puppet:*:*",{"vendor":44,"product":45,"version":61,"criteria":62,"vulnerable":4},"0.8.1","cpe:2.3:a:puppet:puppetlabs-apache:0.8.1:*:*:*:*:puppet:*:*",{"vendor":44,"product":45,"version":64,"criteria":65,"vulnerable":4},"0.9.0","cpe:2.3:a:puppet:puppetlabs-apache:0.9.0:*:*:*:*:puppet:*:*",{"vendor":44,"product":45,"version":67,"criteria":68,"vulnerable":4},"0.10.0","cpe:2.3:a:puppet:puppetlabs-apache:0.10.0:*:*:*:*:puppet:*:*",{"vendor":44,"product":45,"version":70,"criteria":71,"vulnerable":4},"0.11.0","cpe:2.3:a:puppet:puppetlabs-apache:0.11.0:*:*:*:*:puppet:*:*",{"vendor":44,"product":45,"version":73,"criteria":74,"vulnerable":4},"1.0.0","cpe:2.3:a:puppet:puppetlabs-apache:1.0.0:*:*:*:*:puppet:*:*",{"vendor":44,"product":45,"version":76,"criteria":77,"vulnerable":4},"1.0.1","cpe:2.3:a:puppet:puppetlabs-apache:1.0.1:*:*:*:*:puppet:*:*",{"vendor":44,"product":45,"version":79,"criteria":80,"vulnerable":4},"1.1.0","cpe:2.3:a:puppet:puppetlabs-apache:1.1.0:*:*:*:*:puppet:*:*",{"vendor":44,"product":45,"version":82,"criteria":83,"vulnerable":4},"1.1.1","cpe:2.3:a:puppet:puppetlabs-apache:1.1.1:*:*:*:*:puppet:*:*",{"vendor":44,"product":45,"version":85,"criteria":86,"vulnerable":4},"1.2.0","cpe:2.3:a:puppet:puppetlabs-apache:1.2.0:*:*:*:*:puppet:*:*",{"vendor":44,"product":45,"version":88,"criteria":89,"vulnerable":4},"1.3.0","cpe:2.3:a:puppet:puppetlabs-apache:1.3.0:*:*:*:*:puppet:*:*",{"vendor":44,"product":45,"version":91,"criteria":92,"vulnerable":4},"1.4.0","cpe:2.3:a:puppet:puppetlabs-apache:1.4.0:*:*:*:*:puppet:*:*",{"vendor":44,"product":45,"version":94,"criteria":95,"vulnerable":4},"1.4.1","cpe:2.3:a:puppet:puppetlabs-apache:1.4.1:*:*:*:*:puppet:*:*",{"vendor":44,"product":45,"version":97,"criteria":98,"vulnerable":4},"1.5.0","cpe:2.3:a:puppet:puppetlabs-apache:1.5.0:*:*:*:*:puppet:*:*",{"vendor":44,"product":45,"version":100,"criteria":101,"vulnerable":4},"1.6.0","cpe:2.3:a:puppet:puppetlabs-apache:1.6.0:*:*:*:*:puppet:*:*",{"vendor":44,"product":45,"version":103,"criteria":104,"vulnerable":4},"1.7.0","cpe:2.3:a:puppet:puppetlabs-apache:1.7.0:*:*:*:*:puppet:*:*",{"vendor":44,"product":45,"version":106,"criteria":107,"vulnerable":4},"1.7.1","cpe:2.3:a:puppet:puppetlabs-apache:1.7.1:*:*:*:*:puppet:*:*",{"vendor":44,"product":45,"version":109,"criteria":110,"vulnerable":4},"1.8.0","cpe:2.3:a:puppet:puppetlabs-apache:1.8.0:*:*:*:*:puppet:*:*",{"vendor":44,"product":45,"version":112,"criteria":113,"vulnerable":4},"1.8.1","cpe:2.3:a:puppet:puppetlabs-apache:1.8.1:*:*:*:*:puppet:*:*",{"vendor":44,"product":45,"version":115,"criteria":116,"vulnerable":4},"1.10.0","cpe:2.3:a:puppet:puppetlabs-apache:1.10.0:*:*:*:*:puppet:*:*",{"vendor":44,"product":45,"version":118,"criteria":119,"vulnerable":4},"1.11.0","cpe:2.3:a:puppet:puppetlabs-apache:1.11.0:*:*:*:*:puppet:*:*",{"vendor":44,"product":45,"version":121,"criteria":122,"vulnerable":4},"2.0.0","cpe:2.3:a:puppet:puppetlabs-apache:2.0.0:*:*:*:*:puppet:*:*",26,[125,131,136,138],{"url":126,"source":127,"tags":128},"http:\u002F\u002Fwww.securityfocus.com\u002Fbid\u002F100859","Securityfocus",[129,130],"Third Party Advisory","VDB Entry",{"url":132,"source":133,"tags":134},"https:\u002F\u002Fpuppet.com\u002Fsecurity\u002Fcve\u002FCVE-2017-2299","Puppet",[135],"Vendor Advisory",{"url":126,"source":127,"tags":137},[129,130],{"url":132,"source":133,"tags":139},[135],4,[142],{"id":143,"name":144,"description":145,"extendedDescription":146,"status":147,"abstraction":148,"structure":149},"CWE-295","Improper Certificate Validation","The product does not validate, or incorrectly validates, a certificate.","When a certificate is invalid or malicious, it might allow an attacker to spoof a trusted entity by interfering in the communication path between the host and client. The product might connect to a malicious host while believing it is a trusted host, or the product might be deceived into accepting spoofed data that appears to originate from a trusted host.","Draft","Base","Simple",1,false,[],{"title":154,"metaDescription":155,"keywords":156,"canonicalUrl":157,"structuredData":158},"What is CVE-2017-2299? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2017-2299, a high severity cyber security vulnerability from 2017. Versions of the puppetlabs-apache module prior to 1.11.1 and...","CVE-2017-2299, CVE-2017-2299 vulnerability, CVE-2017-2299 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2017, CVSS score, exploit, patch, remediation, puppet security, puppetlabs-apache vulnerability","\u002Fwhat-is\u002Fcve-2017-2299",{"@context":159,"@type":160,"headline":154,"description":155,"datePublished":10,"dateModified":11,"author":161,"publisher":165,"about":169,"mainEntityOfPage":173,"articleSection":176,"keywords":177},"https:\u002F\u002Fschema.org","TechArticle",{"@type":162,"name":163,"url":164},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":162,"name":163,"url":164,"logo":166},{"@type":167,"url":168},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":170,"name":6,"description":171,"additionalType":172},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":174,"@id":175},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2017-2299","Cybersecurity","CVE-2017-2299, CVE-2017-2299 vulnerability, CVE-2017-2299 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[179],{"Operator":15,"Negate":15,"Nodes":180},[181],{"Operator":182,"Negate":15,"CPEMatch":183},"OR",[184,186,188,190,192,194,196,198,200,202,204,206,208,210,212,214,216,218,220,222,224,226,228,230,232,234],{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":185,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"7D70DDE7-AFD8-4E96-B124-D8C74A713D24",{"Vulnerable":4,"Criteria":50,"MatchCriteriaID":187,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"C3246101-B815-433E-8818-69DDCBF231DB",{"Vulnerable":4,"Criteria":53,"MatchCriteriaID":189,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"96DC25A5-20DA-4AAB-AFE8-E0F8860410CB",{"Vulnerable":4,"Criteria":56,"MatchCriteriaID":191,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"024EAA12-121C-4C5D-AEA0-1006A9EEC1C0",{"Vulnerable":4,"Criteria":59,"MatchCriteriaID":193,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"2D2DA386-58F8-42FF-AB23-87260D459CAE",{"Vulnerable":4,"Criteria":62,"MatchCriteriaID":195,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"0179AF2F-6F74-4A78-978D-12A981792F71",{"Vulnerable":4,"Criteria":65,"MatchCriteriaID":197,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"D964B3B4-497E-45EF-802A-79ACEB7872C1",{"Vulnerable":4,"Criteria":68,"MatchCriteriaID":199,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"52A890BA-C4EA-4F72-9937-66F96C3B8480",{"Vulnerable":4,"Criteria":71,"MatchCriteriaID":201,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"D2BA6D0F-E9D5-4769-994C-BDA113D4B1A2",{"Vulnerable":4,"Criteria":74,"MatchCriteriaID":203,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"E2429B70-9CDE-430C-9324-01EE6928299F",{"Vulnerable":4,"Criteria":77,"MatchCriteriaID":205,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"7CBA3B25-D5A3-424C-B69A-6CCCF10F395F",{"Vulnerable":4,"Criteria":80,"MatchCriteriaID":207,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"2C73644F-80EF-40FD-BE15-3ACB9DC829CE",{"Vulnerable":4,"Criteria":83,"MatchCriteriaID":209,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"C414F85A-5D3A-46A1-994F-2BE4C1210640",{"Vulnerable":4,"Criteria":86,"MatchCriteriaID":211,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"6F26D4FE-B16F-4619-AD16-043CF29EADBE",{"Vulnerable":4,"Criteria":89,"MatchCriteriaID":213,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"C606B26F-9844-4F3C-ACAB-EEB518A2D76B",{"Vulnerable":4,"Criteria":92,"MatchCriteriaID":215,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"14EBC0AA-06E2-49C1-AE46-CB5F672B5A1C",{"Vulnerable":4,"Criteria":95,"MatchCriteriaID":217,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"3010C01A-82B8-444B-801D-A8D515D6EC21",{"Vulnerable":4,"Criteria":98,"MatchCriteriaID":219,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"59EAC010-B84C-4ED6-AEC7-CD70D89AC859",{"Vulnerable":4,"Criteria":101,"MatchCriteriaID":221,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"8EF8205F-4624-4CEF-8935-3C868FC9FFBB",{"Vulnerable":4,"Criteria":104,"MatchCriteriaID":223,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"0FB55AE5-E67D-4697-A139-4425D5E953DF",{"Vulnerable":4,"Criteria":107,"MatchCriteriaID":225,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"BA3DD4BB-F2BE-4134-A7C3-C5F649BB5374",{"Vulnerable":4,"Criteria":110,"MatchCriteriaID":227,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"693B5119-047D-4EFB-9FA3-D1CC96A8445D",{"Vulnerable":4,"Criteria":113,"MatchCriteriaID":229,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"8ED815B1-53DF-407C-8FA2-D1002B3040E6",{"Vulnerable":4,"Criteria":116,"MatchCriteriaID":231,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"097F64B5-6019-4AE0-8F7E-F986E30619DE",{"Vulnerable":4,"Criteria":119,"MatchCriteriaID":233,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"A40BABAF-51B6-4B45-9E5F-F2BC14BB4D16",{"Vulnerable":4,"Criteria":122,"MatchCriteriaID":235,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"34E0E71D-3CD8-473C-9B31-98049634B43B",[],[],{"lastModified":11,"cacheTime":239,"version":32},1792257325048,{"score":241,"band":242,"action":243,"scoredAt":244},46,"Medium","Plan remediation","2026-10-17T09:11:59.595372+00:00"]