Lucene search

[email protected]CVE-2021-27026

HistoryNov 18, 2021 - 3:15 p.m.

CVE-2021-27026

2021-11-1815:15:00

CWE-532

[email protected]

web.nvd.nist.gov

cve-2021-27026

puppet

puppet enterprise

vulnerability

nvd

4.4 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

4.7 Medium

AI Score

Confidence

High

2.1 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

0.0004 Low

EPSS

Percentile

11.7%

JSON

A flaw was divered in Puppet Enterprise and other Puppet products where sensitive plan parameters may be logged

CPENameOperatorVersion
puppet:puppetpuppetlt2021.4.0
puppet:puppet_connectpuppet puppet connectlt0.4.0
puppet:puppet_enterprisepuppet puppet enterpriselt2019.8.9

CPE	Name	Operator	Version
puppet:puppet	puppet	lt	2021.4.0
puppet:puppet_connect	puppet puppet connect	lt	0.4.0
puppet:puppet_enterprise	puppet puppet enterprise	lt	2019.8.9

References

puppet.com/security/cve/cve-2021-27026

4.4 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

4.7 Medium

AI Score

Confidence

High

2.1 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

0.0004 Low

EPSS

Percentile

11.7%

JSON

Related for CVE-2021-27026

prion1 nessus1