Vulnerability Database

296,746

Total vulnerabilities in the database

CVE-2015-7328

Puppet Server in Puppet Enterprise before 3.8.x before 3.8.3 and 2015.2.x before 2015.2.3 uses world-readable permissions for the private key of the Certification Authority (CA) certificate during the initial installation and configuration, which might allow local users to obtain sensitive information via unspecified vectors.

  • Published: Jan 8, 2016
  • Updated: Apr 13, 2023
  • CVE: CVE-2015-7328
  • Severity: Low
  • Exploit:

CVSS v3:

  • Severity: Low
  • Score: 4.7
  • AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

CVSS v2:

  • Severity: Low
  • Score: 1.9
  • AV:L/AC:M/Au:N/C:P/I:N/A:N

CWEs:

Software From Fixed in
puppet / puppet_enterprise 3.8.0 3.8.0.x
puppet / puppet_enterprise 3.8.1 3.8.1.x
puppet / puppet_enterprise 3.8.2 3.8.2.x
puppet / puppet_enterprise 2015.2.0 2015.2.0.x
puppet / puppet_enterprise 2015.2.1 2015.2.1.x
puppet / puppet_enterprise 2015.2.2 2015.2.2.x