CVE-2015-7330: Puppet Enterprise

High severity, CVSS 8.8. EPSS: 2.1% chance of exploitation in the next 30 days.

Puppet Enterprise 2015.3 before 2015.3.1 allows remote attackers to bypass a host whitelist protection mechanism by leveraging the Puppet communications protocol.

Affected products

• Puppet Puppet Enterprise: version 2015.3.0 only

Published 2016-04-11. Last modified 2026-06-17.