medium5.0
CVE-2014-3249
Puppet Enterprise 2.8.x before 2.8.7 allows remote attackers to obtain sensitive information via vectors involving hiding and unhiding nodes.
Impact
Puppet Enterprise 2.8.x before 2.8.7 allows remote attackers to obtain sensitive information via vectors involving hiding and unhiding nodes.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Puppet | Puppet Enterprise | Versions 2.8.0, 2.8.1, 2.8.2, 2.8.3, 2.8.4, 2.8.5 |