Lucene search

K
debiancveDebian Security Bug TrackerDEBIANCVE:CVE-2013-4961
HistoryAug 20, 2013 - 10:55 p.m.

CVE-2013-4961

2013-08-2022:55:00
Debian Security Bug Tracker
security-tracker.debian.org
4

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.002 Low

EPSS

Percentile

56.6%

Puppet Enterprise before 3.0.1 includes version information for the Apache and Phusion Passenger products in its HTTP response headers, which allows remote attackers to obtain sensitive information.

OSVersionArchitecturePackageVersionFilename
Debian11allpuppet< 5.5.22-2puppet_5.5.22-2_all.deb
Debian10allpuppet< 5.5.10-4puppet_5.5.10-4_all.deb

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.002 Low

EPSS

Percentile

56.6%

Related for DEBIANCVE:CVE-2013-4961