Not rated
CVE-2021-27022 A flaw was discovered in bolt-server and ace where running a task with sensitive parameters results in those sensitive…
Description
A flaw was discovered in bolt-server and ace where running a task with sensitive parameters results in those sensitive parameters being logged when they should not be. This issue only affects SSH/WinRM nodes (inventory service nodes).
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Puppet Enterprise | 2019.8.7 | No fix stated |
Other CVEs of Puppet Enterprise
The 4 CVEs of Puppet Enterprise →
CVE-2021-27020
Puppet Enterprise presented a security risk by not sanitizing user input when doing a CSV export
Not rated
CVE-2020-7943
Puppet Server and PuppetDB provide useful performance and debugging information via their metrics API endpoints
Not rated
CVE-2019-10694
The express install, which is the suggested way to install Puppet Enterprise, gives the user a URL at the end of the…
Not rated