Lucene search

K
cvelistMitreCVELIST:CVE-2014-3250
HistoryDec 11, 2017 - 5:00 p.m.

CVE-2014-3250

2017-12-1117:00:00
mitre
www.cve.org

6.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

45.1%

The default vhost configuration file in Puppet before 3.6.2 does not include the SSLCARevocationCheck directive, which might allow remote attackers to obtain sensitive information via a revoked certificate when a Puppet master runs with Apache 2.4.

6.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

45.1%

Related for CVELIST:CVE-2014-3250