CVE-2014-3249

Published: Jun 17, 2014Modified: May 6, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

Puppet Enterprise 2.8.x before 2.8.7 allows remote attackers to obtain sensitive information via vectors involving hiding and unhiding nodes.

Affected (7)

Products: Puppet: Puppet Enterprise

1 product

Puppet Enterprise

Configuration A

7 vulnerable

Vulnerable Software	Affected Versions
Puppet Puppet Enterprise	Version 2.8.0
Puppet Puppet Enterprise	Version 2.8.1
Puppet Puppet Enterprise	Version 2.8.2
Puppet Puppet Enterprise	Version 2.8.3
Puppet Puppet Enterprise	Version 2.8.4
Puppet Puppet Enterprise	Version 2.8.5
Puppet Puppet Enterprise	Version 2.8.6

Related CWEs

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (4)

http://puppetlabs.com/security/cve/cve-2014-3249

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/59197

Source: cve@mitre.org

http://puppetlabs.com/security/cve/cve-2014-3249

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/59197

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.