Non notée
CVE-2021-27022 A flaw was discovered in bolt-server and ace where running a task with sensitive parameters results in those sensitive…
Description
A flaw was discovered in bolt-server and ace where running a task with sensitive parameters results in those sensitive parameters being logged when they should not be. This issue only affects SSH/WinRM nodes (inventory service nodes).
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Puppet Enterprise | 2019.8.7 | Pas de correctif indiqué |
Autres CVE de Puppet Enterprise
Les 4 CVE de Puppet Enterprise →
CVE-2021-27020
Puppet Enterprise presented a security risk by not sanitizing user input when doing a CSV export
Non notée
CVE-2020-7943
Puppet Server and PuppetDB provide useful performance and debugging information via their metrics API endpoints
Non notée
CVE-2019-10694
The express install, which is the suggested way to install Puppet Enterprise, gives the user a URL at the end of the…
Non notée