Not rated

CVE-2021-27024 A flaw was discovered in Continuous Delivery for Puppet Enterprise (CD4PE) that results in a user with lower…

Description

A flaw was discovered in Continuous Delivery for Puppet Enterprise (CD4PE) that results in a user with lower privileges being able to access a Puppet Enterprise API token. This issue is resolved in CD4PE 4.10.0

Affected products and versions

Product	Affected versions	Fixed in
Puppet Continuous Delivery for Puppet Enterprise (CD4PE)	Versions not published

Do you use Puppet Continuous Delivery for Puppet Enterprise (CD4PE)?

Track this CVE Watch Puppet Continuous Delivery for Puppet Enterprise (CD4PE) Check my SBOMs

www.cveye.io/en/cve/CVE-2021-27024

Timeline

Published November 18, 2021
Last modified August 3, 2024

References

puppet.com puppet.com

Track this CVE