Non notée
CVE-2019-10694 The express install, which is the suggested way to install Puppet Enterprise, gives the user a URL at the end of the…
Description
The express install, which is the suggested way to install Puppet Enterprise, gives the user a URL at the end of the install to set the admin password. If they do not use that URL, there is an overlooked default password for the admin user. This was resolved in Puppet Enterprise 2019.0.3 and 2018.1.9.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Puppet Enterprise | Versions non publiées |
Autres CVE de Puppet Enterprise
Les 4 CVE de Puppet Enterprise →
CVE-2021-27022
A flaw was discovered in bolt-server and ace where running a task with sensitive parameters results in those sensitive…
Non notée
CVE-2021-27020
Puppet Enterprise presented a security risk by not sanitizing user input when doing a CSV export
Non notée
CVE-2020-7943
Puppet Server and PuppetDB provide useful performance and debugging information via their metrics API endpoints
Non notée