[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fUOffAB0KKeZI-a3EtNseabYfpVtd0XDA7COPoTU8f9s":3,"g5a-risk:CVE-2023-5255":112},{"success":4,"data":5,"meta":109},true,{"cveId":6,"title":7,"description":8,"shortDescription":8,"publishedDate":9,"lastModified":10,"cvssScore":11,"cvssVector":12,"cvssMetrics":13,"epssScore":36,"epssPercentile":25,"epssTimeSeries":37,"severity":38,"affectedProducts":39,"affectedProductsCount":51,"references":52,"referencesCount":58,"weaknesses":59,"weaknessesCount":58,"isActivelyExploited":68,"cisaInfo":25,"otxData":25,"relatedBlogPosts":69,"seoMetadata":70,"configurations":95,"relatedVendorCves":107,"notableEvents":108},"CVE-2023-5255","What is CVE-2023-5255?","For certificates that utilize the auto-renew feature in Puppet Server, a flaw exists which prevents the certificates from being revoked.","2023-10-03T18:15:10.577","2023-10-05T16:48:26.82",7.5,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",{"CVSSMetricV31":14,"CVSSMetricV30":25,"CVSSMetricV2":25,"CVSSMetricV40":25},[15,28],{"Source":16,"Type":17,"CVSSData":18,"ExploitabilityScore":26,"ImpactScore":27},"nvd@nist.gov","Primary",{"Version":19,"VectorString":12,"AttackVector":20,"AttackComplexity":21,"PrivilegesRequired":22,"UserInteraction":22,"Scope":23,"ConfidentialityImpact":22,"IntegrityImpact":22,"AvailabilityImpact":24,"BaseScore":11,"BaseSeverity":24,"ExploitCodeMaturity":25,"RemediationLevel":25,"ReportConfidence":25,"TemporalScore":25,"TemporalSeverity":25,"ConfidentialityRequirement":25,"IntegrityRequirement":25,"AvailabilityRequirement":24,"ModifiedAttackVector":25,"ModifiedAttackComplexity":25,"ModifiedPrivilegesRequired":25,"ModifiedUserInteraction":25,"ModifiedScope":25,"ModifiedConfidentialityImpact":25,"ModifiedIntegrityImpact":25,"ModifiedAvailabilityImpact":25,"EnvironmentalScore":25,"EnvironmentalSeverity":25},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH",null,3.9,3.6,{"Source":29,"Type":30,"CVSSData":31,"ExploitabilityScore":35,"ImpactScore":27},"security@puppet.com","Secondary",{"Version":19,"VectorString":32,"AttackVector":20,"AttackComplexity":24,"PrivilegesRequired":24,"UserInteraction":22,"Scope":23,"ConfidentialityImpact":22,"IntegrityImpact":22,"AvailabilityImpact":24,"BaseScore":33,"BaseSeverity":34,"ExploitCodeMaturity":25,"RemediationLevel":25,"ReportConfidence":25,"TemporalScore":25,"TemporalSeverity":25,"ConfidentialityRequirement":25,"IntegrityRequirement":25,"AvailabilityRequirement":24,"ModifiedAttackVector":25,"ModifiedAttackComplexity":25,"ModifiedPrivilegesRequired":25,"ModifiedUserInteraction":25,"ModifiedScope":25,"ModifiedConfidentialityImpact":25,"ModifiedIntegrityImpact":25,"ModifiedAvailabilityImpact":25,"EnvironmentalScore":25,"EnvironmentalSeverity":25},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:H\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",4.4,"MEDIUM",0.7,0.00476,[36,36,36,36,36,36,36],"High",[40,44,48],{"vendor":41,"product":41,"version":42,"criteria":43,"vulnerable":4},"puppet","2023.3","cpe:2.3:a:puppet:puppet:2023.3:*:*:*:enterprise:*:*:*",{"vendor":41,"product":45,"version":46,"criteria":47,"vulnerable":4},"puppet_server","8.2.0","cpe:2.3:a:puppet:puppet_server:8.2.0:*:*:*:*:*:*:*",{"vendor":41,"product":45,"version":49,"criteria":50,"vulnerable":4},"8.2.1","cpe:2.3:a:puppet:puppet_server:8.2.1:*:*:*:*:*:*:*",3,[53],{"url":54,"source":55,"tags":56},"https:\u002F\u002Fwww.puppet.com\u002Fsecurity\u002Fcve\u002Fcve-2023-5255-denial-service-revocation-auto-renewed-certificates","Puppet",[57],"Vendor Advisory",1,[60],{"id":61,"name":62,"description":63,"extendedDescription":64,"status":65,"abstraction":66,"structure":67},"CWE-404","Improper Resource Shutdown or Release","The product does not release or incorrectly releases a resource before it is made available for re-use.","When a resource is created or allocated, the developer is responsible for properly releasing the resource as well as accounting for all potential paths of expiration or invalidation, such as a set period of time or revocation.","Draft","Class","Simple",false,[],{"title":71,"metaDescription":72,"keywords":73,"canonicalUrl":74,"structuredData":75},"What is CVE-2023-5255? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2023-5255, a high severity cyber security vulnerability from 2023. For certificates that utilize the auto-renew feature in Pupp...","CVE-2023-5255, CVE-2023-5255 vulnerability, CVE-2023-5255 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2023, CVSS score, exploit, patch, remediation, puppet security, puppet vulnerability, puppet_server vulnerability","\u002Fwhat-is\u002Fcve-2023-5255",{"@context":76,"@type":77,"headline":71,"description":72,"datePublished":9,"dateModified":10,"author":78,"publisher":82,"about":86,"mainEntityOfPage":90,"articleSection":93,"keywords":94},"https:\u002F\u002Fschema.org","TechArticle",{"@type":79,"name":80,"url":81},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":79,"name":80,"url":81,"logo":83},{"@type":84,"url":85},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":87,"name":6,"description":88,"additionalType":89},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":91,"@id":92},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2023-5255","Cybersecurity","CVE-2023-5255, CVE-2023-5255 vulnerability, CVE-2023-5255 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[96],{"Operator":25,"Negate":25,"Nodes":97},[98],{"Operator":99,"Negate":25,"CPEMatch":100},"OR",[101,103,105],{"Vulnerable":4,"Criteria":43,"MatchCriteriaID":102,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"8E4196F0-B1C3-46EF-A17C-6404E9E34CB3",{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":104,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"5463CE94-DD76-4DBE-B124-3B87B8627A9E",{"Vulnerable":4,"Criteria":50,"MatchCriteriaID":106,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"B7891ED2-94F2-4017-8172-BD04E66CB792",[],[],{"lastModified":10,"cacheTime":110,"version":111},1792257722681,"2.0",{"score":113,"band":114,"action":115,"scoredAt":116},46,"Medium","Plan remediation","2026-10-16T06:59:18.811409+00:00"]