Lucene search
HistoryDec 19, 2014 - 3:59 p.m.
CVE-2014-9355
puppet
enterprise
cve-2014-9355
remote authenticated users
licensing
certificate signing request
nvd
6.2 Medium
AI Score
Confidence
Low
4 Medium
CVSS2
Access Vector
Access Complexity
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:S/C:P/I:N/A:N
0.001 Low
EPSS
Percentile
46.2%
Puppet Enterprise before 3.7.1 allows remote authenticated users to obtain licensing and certificate signing request information by leveraging access to an unspecified API endpoint.
Affected configurations
Node
puppetpuppet_enterpriseRange≤3.7.0
| CPE | Name | Operator | Version |
|---|---|---|---|
| puppet:puppet_enterprise | puppet puppet enterprise | le | 3.7.0 |
Related
nvd
nvd
CVE-2014-9355
2014-12-19 15:59:25
cvelist
cvelist
CVE-2014-9355
2014-12-19 15:00:00
debiancve
debiancve
CVE-2014-9355
2014-12-19 15:59:25
prion
prion
Cross site request forgery (csrf)
2014-12-19 15:59:00
ubuntucve
ubuntucve
CVE-2014-9355
2014-12-19 00:00:00
6.2 Medium
AI Score
Confidence
Low
4 Medium
CVSS2
Access Vector
Access Complexity
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:S/C:P/I:N/A:N
0.001 Low
EPSS
Percentile
46.2%
Related for CVE-2014-9355