← All advisories

Unrated severityNVD Advisory· Published Jun 17, 2014· Updated Jun 17, 2026

CVE-2014-3249

CVE-2014-3249

Description

Puppet Enterprise 2.8.x before 2.8.7 allows remote attackers to obtain sensitive information via vectors involving hiding and unhiding nodes.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

8

Puppet (software)/Puppet Enterprise8 versions
cpe:2.3:a:puppet:puppet_enterprise:2.8.0:*:*:*:*:*:*:*+ 7 more
- cpe:2.3:a:puppet:puppet_enterprise:2.8.0:*:*:*:*:*:*:*
- cpe:2.3:a:puppet:puppet_enterprise:2.8.1:*:*:*:*:*:*:*
- cpe:2.3:a:puppet:puppet_enterprise:2.8.2:*:*:*:*:*:*:*
- cpe:2.3:a:puppet:puppet_enterprise:2.8.3:*:*:*:*:*:*:*
- cpe:2.3:a:puppet:puppet_enterprise:2.8.4:*:*:*:*:*:*:*
- cpe:2.3:a:puppet:puppet_enterprise:2.8.5:*:*:*:*:*:*:*
- cpe:2.3:a:puppet:puppet_enterprise:2.8.6:*:*:*:*:*:*:*
- (no CPE)range: >= 2.8.0, < 2.8.7

Patches

Vulnerability mechanics

References

2

puppetlabs.com/security/cve/cve-2014-3249nvdVendor Advisory
secunia.com/advisories/59197nvd

News mentions

0

No linked articles in our index yet.