8140
Puppet Master
Critical RiskTCP — System & Infrastructure
Port Overview
Port Number
8140
Service Name
Puppet Master
Transport Protocol
TCP
Category
System & Infrastructure
Security Risk
Critical
Port Range
Registered (1024-49151)
What is Port 8140?
Port 8140 is the default HTTPS port for Puppet Server (Puppet Master), the central configuration management server in a Puppet infrastructure. Puppet agents connect to this port to retrieve configuration catalogs and report compliance status. Compromise of the Puppet master provides complete control over all managed systems.
TCP
System & Infrastructure
Commonly Used
Security Considerations
Port 8140 (Puppet Master) is classified as critical risk. This port should not be exposed to the public internet. The service transmits data without encryption, making it vulnerable to eavesdropping, credential theft, and man-in-the-middle attacks.
Recommendation: Block this port at the firewall. Use encrypted alternatives (SSH, SFTP, HTTPS) instead.