CVE-2016-5715 | Puppet Enterprise up to 2016.3 Web Interface redirect (Nessus ID 95392 / BID-93846)
A vulnerability categorized as critical has been discovered in Puppet Enterprise up to 2016.3. Affected by this vulnerability is an unknown functionality of the component Web Interface. Such manipulation leads to open redirect.
This vulnerability is listed as CVE-2016-5715. The attack may be performed from remote. There is no available exploit.
It is advisable to upgrade the affected component.