Puppet Enterprise Web Interface versions prior to 2016.4.0 suffer from a user enumeration vulnerability. Continue reading...