CVE-2020-7944

2020-03-2614:16:44

puppet

www.cve.org

7.6 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

28.6%

JSON

In Continuous Delivery for Puppet Enterprise (CD4PE) before 3.4.0, changes to resources or classes containing Sensitive parameters can result in the Sensitive parameters ending up in the impact analysis report.

CNA Affected

[
  {
    "product": "Continuous Delivery for Puppet Enterprise (CD4PE)",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "CD4PE prior to 3.4.0"
      }
    ]
  }
]

References

puppet.com/security/cve/CVE-2020-7944