Race condition vulnerability in Puppet Server 0.2.0 allows unauthorized access to sensitive information during package installation or upgrade.

Race condition vulnerability in Puppet Server 0.2.0 allows unauthorized access to sensitive information during package installation or upgrade.

CVE-2014-7170 · LOW Severity

AV:L/AC:M/AU:N/C:P/I:N/A:N

Race condition in Puppet Server 0.2.0 allows local users to obtain sensitive information by accessing it in between package installation or upgrade and the start of the service.

Learn more about our Cis Benchmark Audit For Server Software.