Race condition in Puppet Server 0.2.0 allows local users to obtain sensitive information by accessing it in between package installation or upgrade and the start of the service.
Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7170
Reference (s):
- http://puppetlabs.com/security/cve/cve-2014-7170