Lucene search

K
prionPRIOn knowledge basePRION:CVE-2014-3250
HistoryDec 11, 2017 - 5:29 p.m.

Design/Logic Flaw

2017-12-1117:29:00
PRIOn knowledge base
www.prio-n.com
1

6.6 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

45.1%

The default vhost configuration file in Puppet before 3.6.2 does not include the SSLCARevocationCheck directive, which might allow remote attackers to obtain sensitive information via a revoked certificate when a Puppet master runs with Apache 2.4.

CPENameOperatorVersion
puppetlt3.6.2

6.6 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

45.1%