VULNERABILITY INTELLIGENCE

CVE-2014-7170

CVSS score1.9 LOW
EPSS probability0.23%
CISA KEVNot currently listed
Published2014-12-17
Last modified2026-06-17
CVSS vectorAV:L/AC:M/Au:N/C:P/I:N/A:N

Description

Race condition in Puppet Server 0.2.0 allows local users to obtain sensitive information by accessing it in between package installation or upgrade and the start of the service.

Weakness classification

  • CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

Primary references