CVE-2014-3250

The default vhost configuration file in Puppet before 3.6.2 does not include the SSLCARevocationCheck directive, which might allow remote attackers to obtain…

published December 11, 2017

CVSS
—
EPSS
1%
Percentile
58.9
In the wild
Unconfirmed
What it is

The default vhost configuration file in Puppet before 3.6.2 does not include the SSLCARevocationCheck directive, which might allow remote attackers to obtain sensitive information via a revoked certificate when a Puppet master runs with Apache 2.4.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00894 · 58.9th percentile
Published
2017-12-11T17:00Z
EPSS history
Timeline
  • 11 DEC 17:00Z
    The default vhost configuration file in Puppet before 3.6.2 does not include the SSLCARevocationCheck directive, which might allow remote attackers to obtain…
    cvelistv5