On July 18, 2018 Java announced several vulnerabilities.
Previous versions of Puppet Enterprise shipped with a vulnerable versions of Java.
For more information about this vulnerability, refer to Java’s security announcement page (http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html#AppendixJAVA).
Affected software versions:
Resolved in: