AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2015-7328

MEDIUM · CVSS 4.7 EPSS 0.17%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2016-01-08 · Last synced 2026-08-04

CyberRota Analysis

This is a medium severity vulnerability with a CVSS score of 4.7. See the original NVD description below for full technical details.

CVE
CVE-2015-7328
Severity
MEDIUM
CVSS
4.7
EPSS
0.17%

Original NVD Description

Puppet Server in Puppet Enterprise before 3.8.x before 3.8.3 and 2015.2.x before 2015.2.3 uses world-readable permissions for the private key of the Certification Authority (CA) certificate during the initial installation and configuration, which might allow local users to obtain sensitive information via unspecified vectors.