description: Previous versions of Puppet Agent didn't verify the peer in the SSL connection prior to downloading the CRL. This issue is resolved in Puppet Agent 6.4.0.
problem types: Improper Certificate Validation
affected:
{
product: Puppet Agent, Puppet
vendor: n/a
versions:
status: affected, version: Puppet Agent 6.x prior to 6.4.0, Puppet 6.x prior to 6.4.x
}