Pulling the right strings for RCE on a Puppet

This blog post discusses the discovery of critical vulnerabilities in Puppet, allowing remote code execution (RCE) on the management server. The author highlights two significant vulnerabilities and a Puppet host impersonation issue that were responsibly disclosed to the vendors, who have patched them in newer versions.