CVE-2015-7328

2016-01-08T19:59:00
ID CVE-2015-7328
Type cve
Reporter cve@mitre.org
Modified 2019-07-10T15:40:00

Description

Puppet Server in Puppet Enterprise before 3.8.x before 3.8.3 and 2015.2.x before 2015.2.3 uses world-readable permissions for the private key of the Certification Authority (CA) certificate during the initial installation and configuration, which might allow local users to obtain sensitive information via unspecified vectors.