CVE-2013-1398
The pe_mcollective module in Puppet Enterprise (PE) before 2.7.1 does not properly restrict access to a catalog of private SSL keys, which allows remote authenticated users to obtain sensitive information and gain privileges by leveraging root access to a node, related to the master role.
View on NVDSeverity
N/A
EPSS
Probability of exploitation (next 30 days): 0.0062 (0.6%)
Percentile: 70.0%
EPSS: 2026-05-06
Affects
puppet:puppet_enterprisepuppetlabs:puppetTechnical description
The pe_mcollective module in Puppet Enterprise (PE) before 2.7.1 does not properly restrict access to a catalog of private SSL keys, which allows remote authenticated users to obtain sensitive information and gain privileges by leveraging root access to a node, related to the master role.
Published: 3/14/2014, 4:55:04 PM
Last modified: 5/6/2026, 10:30:45 PM