CVE-2014-3251

EPSS 0.03%

發布日:2014/8/12修改日:2026/4/28

也稱為:DEBIAN-CVE-2014-3251

描述

The MCollective aes_security plugin, as used in Puppet Enterprise before 3.3.0 and Mcollective before 2.5.3, does not properly validate new server certificates based on the CA certificate, which allows local users to establish unauthorized Mcollective connections via unspecified vectors related to a race condition.

受影響套件(1)

Debian/mcollectivefrom 0, < 2.6.0+dfsg-1

參考連結(1)

ADVISORYhttps://security-tracker.debian.org/tracker/CVE-2014-3251