Not rated
CVE-2019-10694 The express install, which is the suggested way to install Puppet Enterprise, gives the user a URL at the end of the…
Description
The express install, which is the suggested way to install Puppet Enterprise, gives the user a URL at the end of the install to set the admin password. If they do not use that URL, there is an overlooked default password for the admin user. This was resolved in Puppet Enterprise 2019.0.3 and 2018.1.9.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Puppet Enterprise | Versions not published |
Other CVEs of Puppet Enterprise
The 4 CVEs of Puppet Enterprise →
CVE-2021-27022
A flaw was discovered in bolt-server and ace where running a task with sensitive parameters results in those sensitive…
Not rated
CVE-2021-27020
Puppet Enterprise presented a security risk by not sanitizing user input when doing a CSV export
Not rated
CVE-2020-7943
Puppet Server and PuppetDB provide useful performance and debugging information via their metrics API endpoints
Not rated