Vulnerability CVE-2014-3251

Vulnerability Name:

CVE-2014-3251 (CCN-95323)

Assigned:

2014-07-15

Published:

2014-07-15

Updated:

2019-07-10

Summary:

The MCollective aes_security plugin, as used in Puppet Enterprise before 3.3.0 and Mcollective before 2.5.3, does not properly validate new server certificates based on the CA certificate, which allows local users to establish unauthorized Mcollective connections via unspecified vectors related to a race condition.

CVSS v3 Severity:

4.6 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:L/I:N/A:H)

Exploitability Metrics:	Attack Vector (AV): Local Attack Complexity (AC): High Privileges Required (PR): High User Interaction (UI): Required
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): Low Integrity (I): None Availibility (A): High

CVSS v2 Severity:

4.4 Medium (CVSS v2 Vector: AV:L/AC:M/Au:N/C:P/I:P/A:P)
3.2 Low (Temporal CVSS v2 Vector: AV:L/AC:M/Au:N/C:P/I:P/A:P/E:U/RL:OF/RC:C)

Exploitability Metrics:	Access Vector (AV): Local Access Complexity (AC): Medium Authentication (Au): None
Impact Metrics:	Confidentiality (C): Partial Integrity (I): Partial Availibility (A): Partial

4.4 Medium (CCN CVSS v2 Vector: AV:L/AC:H/Au:M/C:P/I:N/A:C)
3.2 Low (CCN Temporal CVSS v2 Vector: AV:L/AC:H/Au:M/C:P/I:N/A:C/E:U/RL:OF/RC:C)

Exploitability Metrics:	Access Vector (AV): Local Access Complexity (AC): High Athentication (Au): Multiple_Instances
Impact Metrics:	Confidentiality (C): Partial Integrity (I): None Availibility (A): Complete

Vulnerability Type:

CWE-362

Vulnerability Consequences:

Bypass Security

References:

Source: MITRE
Type: CNA
CVE-2014-3251

Source: CCN
Type: Puppet Labs Web Site
CVE-2014-3251 (MCollective 'aes_security' Plugin Certificate Validation)

Source: CONFIRM
Type: Vendor Advisory
http://puppetlabs.com/security/cve/cve-2014-3251

Source: SECUNIA
Type: UNKNOWN
59356

Source: SECUNIA
Type: UNKNOWN
60066

Source: OSVDB
Type: UNKNOWN
109257

Source: CCN
Type: BID-69235
Puppet Labs MCollective aes_security Plugin Certificate Validation Security Bypass Vulnerability

Source: XF
Type: UNKNOWN
mcollective-puppet-cve20143251-sec-bypass(95323)

Source: CCN
Type: WhiteSource Vulnerability Database
CVE-2014-3251

Vulnerable Configuration:

Configuration 1:

cpe:/a:puppet:puppet_enterprise:*:*:*:*:*:*:*:* (Version <= 3.2.0)

OR cpe:/a:puppetlabs:mcollective:-:*:*:*:*:*:*:*

Configuration CCN 1:

cpe:/a:puppetlabs:mcollective:-:*:*:*:*:*:*:*

Denotes that component is vulnerable

Oval Definitions

Definition ID	Class	Title	Last Modified
oval:com.ubuntu.bionic:def:201432510000000	V	CVE-2014-3251 on Ubuntu 18.04 LTS (bionic) - medium.	2014-08-12
oval:com.ubuntu.artful:def:20143251000	V	CVE-2014-3251 on Ubuntu 17.10 (artful) - medium.	2014-08-12
oval:com.ubuntu.trusty:def:20143251000	V	CVE-2014-3251 on Ubuntu 14.04 LTS (trusty) - medium.	2014-08-12
oval:com.ubuntu.xenial:def:201432510000000	V	CVE-2014-3251 on Ubuntu 16.04 LTS (xenial) - medium.	2014-08-12
oval:com.ubuntu.bionic:def:20143251000	V	CVE-2014-3251 on Ubuntu 18.04 LTS (bionic) - medium.	2014-08-12
oval:com.ubuntu.xenial:def:20143251000	V	CVE-2014-3251 on Ubuntu 16.04 LTS (xenial) - medium.	2014-08-12
oval:com.ubuntu.cosmic:def:20143251000	V	CVE-2014-3251 on Ubuntu 18.10 (cosmic) - medium.	2014-08-12
oval:com.ubuntu.cosmic:def:201432510000000	V	CVE-2014-3251 on Ubuntu 18.10 (cosmic) - medium.	2014-08-12
oval:com.ubuntu.precise:def:20143251000	V	CVE-2014-3251 on Ubuntu 12.04 LTS (precise) - medium.	2014-08-12

BACK