Launchpad.net

CVE 2014-3249

Puppet Enterprise 2.8.x before 2.8.7 allows remote attackers to obtain sensitive information via vectors involving hiding and unhiding nodes.

See the CVE page on Mitre.org for more details.

References