CVE-2013-4959

Puppet Enterprise before 3.0.1 uses HTTP responses that contain sensitive information without the "no-cache" setting, which might allow local users to obtain…

published August 20, 2013

CVSS
—
EPSS
0%
Percentile
27.6
In the wild
Unconfirmed
What it is

Puppet Enterprise before 3.0.1 uses HTTP responses that contain sensitive information without the "no-cache" setting, which might allow local users to obtain sensitive information such as (1) host name, (2) MAC address, and (3) SSH keys via the web browser cache.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00352 · 27.6th percentile
Published
2013-08-20T22:00Z
EPSS history
Timeline
  • 20 AUG 22:00Z
    Puppet Enterprise before 3.0.1 uses HTTP responses that contain sensitive information without the "no-cache" setting, which might allow local users to obtain…
    cvelistv5