What’s Vulnerable › Vulnerabilities

CVE-2014-3249

• Severity: medium (CVSS 5.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.8% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2014-06-17 · updated 2026-06-17
• Weakness: CWE-200

Description

Puppet Enterprise 2.8.x before 2.8.7 allows remote attackers to obtain sensitive information via vectors involving hiding and unhiding nodes.

Affected products

• Puppet Enterprise: 2.8.0, 2.8.1, 2.8.2, 2.8.3, 2.8.4, 2.8.5 (+1)

References

• http://puppetlabs.com/security/cve/cve-2014-3249
• http://secunia.com/advisories/59197
• http://puppetlabs.com/security/cve/cve-2014-3249
• http://secunia.com/advisories/59197

Get alerted when CVE-2014-3249 or the next vulnerability affects your stack