CVE-2013-4959 — Vulnetix

Try Vulnetix Request Demo

CVE-2013-4959 PUBLISHED CVSS 2.0999999046325684 LOW

Puppet Enterprise before 3.0.1 uses HTTP responses that contain sensitive information without the "no-cache" setting, which might allow local users to obtain sensitive information such as (1) host name, (2) MAC address, and (3) SSH keys via the web browser cache.

EPSS 0.06% · 17.5th percentile

Risk Scores

CVSS v2.0

2.0999999046325684

EPSS Score

0.06%

17.5th percentile

Affected Products

Vendor	Product	Versions
puppet	puppet_enterprise	2.8.3, 0, 2.5.1
n/a	n/a	n/a

Timeline

Aug 19, 2013 CVE Published
Feb 4, 2022 EPSS Score
Mar 28, 2022 EPSS Score
May 19, 2022 EPSS Score
Jul 10, 2022 EPSS Score
Sep 1, 2022 EPSS Score
Oct 23, 2022 EPSS Score
Dec 14, 2022 EPSS Score
Feb 4, 2023 EPSS Score
Mar 7, 2023 EPSS Score
Mar 28, 2023 EPSS Score
May 19, 2023 EPSS Score

References

Open in Interactive Console →