CVE-2014-3249
published 2014-06-17CVE-2014-3249: Puppet Enterprise 2.8.x before 2.8.7 allows remote attackers to obtain sensitive information via vectors involving hiding and unhiding nodes.
PriorityP420medium5CVSS 2.0
AVNACLAuNCPINAN
EPSS
1.78%
76.7th percentile
Puppet Enterprise 2.8.x before 2.8.7 allows remote attackers to obtain sensitive information via vectors involving hiding and unhiding nodes.
Affected
8 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | puppet | — | — |
| puppet | puppet_enterprise | — | — |
| puppet | puppet_enterprise | — | — |
| puppet | puppet_enterprise | — | — |
| puppet | puppet_enterprise | — | — |
| puppet | puppet_enterprise | — | — |
| puppet | puppet_enterprise | — | — |
| puppet | puppet_enterprise | — | — |
CVSS provenance
nvdv2.05.0MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N
vendor_debian5.0LOW
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-rc63-f87j-5cf4: Puppet Enterprise 2
ghsa_unreviewed·2022-05-14
CVE-2014-3249 [MEDIUM] CWE-200 GHSA-rc63-f87j-5cf4: Puppet Enterprise 2
Puppet Enterprise 2.8.x before 2.8.7 allows remote attackers to obtain sensitive information via vectors involving hiding and unhiding nodes.
Debian
CVE-2014-3249: puppet - Puppet Enterprise 2.8.x before 2.8.7 allows remote attackers to obtain sensitive...
vendor_debian·2014·CVSS 5.0
CVE-2014-3249 [MEDIUM] CVE-2014-3249: puppet - Puppet Enterprise 2.8.x before 2.8.7 allows remote attackers to obtain sensitive...
Puppet Enterprise 2.8.x before 2.8.7 allows remote attackers to obtain sensitive information via vectors involving hiding and unhiding nodes.
Scope: local
bullseye: resolved
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2014-06-17
Published