vulnerability

Oracle Solaris 11: CVE-2014-3250: Vulnerability in Puppet

Severity
4
CVSS
(AV:N/AC:L/Au:S/C:P/I:N/A:N)
Published
May 29, 2017
Added
May 29, 2017
Modified
Feb 1, 2022

Description

The default vhost configuration file in Puppet before 3.6.2 does not include the SSLCARevocationCheck directive, which might allow remote attackers to obtain sensitive information via a revoked certificate when a Puppet master runs with Apache 2.4.

Solution(s)

oracle-solaris-11-2-upgrade-system-management-puppet-19-3-6-2-0-175-2-5-0-2-0oracle-solaris-11-2-upgrade-system-management-puppet-3-6-2-0-175-2-5-0-2-0
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.