CVE-2014-7170 Race condition in Puppet Server 0.2.0 allows local users to obtain sensitive information by accessing it in between package installation or upgrade and the start of the service.
LowCVSS 1.9
EPSS 0.23%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Race condition in Puppet Server 0.2.0 allows local users to obtain sensitive information by accessing it in between package installation or upgrade and the start of the service.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| puppet server | = 0.2.0 | No fix listed |
References
- puppetlabs.com vendor-advisory
- Debian Security Tracker CVE-2014-7170 vendor-advisory