Lucene search

[email protected]CVE-2021-27019

HistoryAug 30, 2021 - 6:15 p.m.

CVE-2021-27019

2021-08-3018:15:00

CWE-532

[email protected]

web.nvd.nist.gov

cve-2021-27019

puppetdb

logging

vulnerability

nvd

4.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

4.6 Medium

AI Score

Confidence

High

4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:N/A:N

0.001 Low

EPSS

Percentile

21.4%

JSON

PuppetDB logging included potentially sensitive system information.

CPENameOperatorVersion
puppet:puppetdbpuppet puppetdblt7.3.1
puppet:puppetdbpuppet puppetdblt6.16.1
puppet:puppet_enterprisepuppet puppet enterpriselt2019.8.6

CPE	Name	Operator	Version
puppet:puppetdb	puppet puppetdb	lt	7.3.1
puppet:puppetdb	puppet puppetdb	lt	6.16.1
puppet:puppet_enterprise	puppet puppet enterprise	lt	2019.8.6

References

puppet.com/security/cve/CVE-2021-27019

4.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

4.6 Medium

AI Score

Confidence

High

4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:N/A:N

0.001 Low

EPSS

Percentile

21.4%

JSON

Related for CVE-2021-27019

prion1 nessus1 veracode1 osv1 ubuntucve1 debiancve1