CVE-2013-4961 PUBLISHED CVSS 5 MEDIUM

Puppet Enterprise before 3.0.1 includes version information for the Apache and Phusion Passenger products in its HTTP response headers, which allows remote attackers to obtain sensitive information.

EPSS 0.25% · 48.2th percentile

Risk Scores

CVSS v2.0
5
EPSS Score
0.25%
48.2th percentile

Affected Products

VendorProductVersions
puppetpuppet_enterprise2.8.3, 0, 2.5.1
n/an/an/a

Timeline

References

Open in Interactive Console →