Product
An authorization bypass vulnerability in the trapperkeeper-authorization component of Puppet Server allows node impersonation and remote command execution via specifically crafted CA-signed certificates. A public exploit is available.