Sign in Get started

← All advisories

Unrated severityNVD Advisory· Published Jun 17, 2014· Updated May 6, 2026

CVE-2014-3249

CVE-2014-3249

Description

Puppet Enterprise 2.8.x before 2.8.7 allows remote attackers to obtain sensitive information via vectors involving hiding and unhiding nodes.

Affected products

7

Puppet (software)/Puppet Enterprise7 versions
cpe:2.3:a:puppet:puppet_enterprise:2.8.0:*:*:*:*:*:*:*+ 6 more
- cpe:2.3:a:puppet:puppet_enterprise:2.8.0:*:*:*:*:*:*:*
- cpe:2.3:a:puppet:puppet_enterprise:2.8.1:*:*:*:*:*:*:*
- cpe:2.3:a:puppet:puppet_enterprise:2.8.2:*:*:*:*:*:*:*
- cpe:2.3:a:puppet:puppet_enterprise:2.8.3:*:*:*:*:*:*:*
- cpe:2.3:a:puppet:puppet_enterprise:2.8.4:*:*:*:*:*:*:*
- cpe:2.3:a:puppet:puppet_enterprise:2.8.5:*:*:*:*:*:*:*
- cpe:2.3:a:puppet:puppet_enterprise:2.8.6:*:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

2

puppetlabs.com/security/cve/cve-2014-3249nvdVendor Advisory
secunia.com/advisories/59197nvd

News mentions

0

No linked articles in our index yet.