CVE-2014-3249

Puppet Enterprise 2.8.x before 2.8.7 allows remote attackers to obtain sensitive information via vectors involving hiding and unhiding nodes.

Score

CVSS 2.0 5.0 Medium

Status

Modified - cve@mitre.org

Published

2014-06-17

Last modified

2024-08-06

Weaknesses

CWE-200

Affected products

• Puppet Enterprise (Puppet)

References

• http://puppetlabs.com/security/cve/cve-2014-3249
• http://secunia.com/advisories/59197