CVE-2014-9355

MEDIUM 4.0CVE-2014-9355 · Published 19/12/2014 · updated 17/06/2026

In short

CVE-2014-9355 is a MEDIUM (CVSS 4.0) vulnerability affecting puppet enterprise (puppet).
Chance of exploitation in the next 30 days (EPSS): 0.61%, higher than 49.5% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
puppet enterprise puppet	`≤ 3.7.0`	No fix yet

Description

Puppet Enterprise before 3.7.1 allows remote authenticated users to obtain licensing and certificate signing request information by leveraging access to an unspecified API endpoint.

References

puppetlabs.com/security/cve/cve-2014-9355 · Vendor Advisory
secunia.com/advisories/61265

More vulnerabilities in puppet enterprise

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free