CVE-2013-1398

The pe_mcollective module in Puppet Enterprise (PE) before 2.7.1 does not properly restrict access to a catalog of private SSL keys, which allows remote…

published March 14, 2014

CVSS
—
EPSS
2%
Percentile
74.7
In the wild
Unconfirmed
What it is

The pe_mcollective module in Puppet Enterprise (PE) before 2.7.1 does not properly restrict access to a catalog of private SSL keys, which allows remote authenticated users to obtain sensitive information and gain privileges by leveraging root access to a node, related to the master role.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01541 · 74.7th percentile
Published
2014-03-14T16:00Z
EPSS history
Timeline
  • 14 MAR 16:00Z
    The pe_mcollective module in Puppet Enterprise (PE) before 2.7.1 does not properly restrict access to a catalog of private SSL keys, which allows remote…
    cvelistv5