CVE-2015-7328 | BDVDB-2026-73680 Detail

Description#

Puppet Server in Puppet Enterprise before 3.8.x before 3.8.3 and 2015.2.x before 2015.2.3 uses world-readable permissions for the private key of the Certification Authority (CA) certificate during the initial installation and configuration, which might allow local users to obtain sensitive information via unspecified vectors.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://puppetlabs.com/security/cve/cve-2015-7328

Exploit#

No public exploit known

History#

Version 12016-01-08Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.