Vulnerability identifier: #VU40539

Vulnerability risk: Low

CVSSv3.1: 4.1 [CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C]

CVE-ID: CVE-2015-7328

CWE-ID: CWE-200

Exploitation vector: Local

Exploit availability: No

Vulnerable software:
Puppet Enterprise
Client/Desktop applications / Software for system administration

Vendor: Puppet Labs

Description

The vulnerability allows a local authenticated user to gain access to sensitive information.

Puppet Server in Puppet Enterprise before 3.8.x before 3.8.3 and 2015.2.x before 2015.2.3 uses world-readable permissions for the private key of the Certification Authority (CA) certificate during the initial installation and configuration, which might allow local users to obtain sensitive information via unspecified vectors.

Mitigation
Install update from vendor's website.

Vulnerable software versions

Puppet Enterprise: 3.8.0 - 3.8.2, 2015.2.0 - 2015.2.2

---

External links
http://puppetlabs.com/security/cve/cve-2015-7328

---

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.