Design/Logic Flaw

2020-09-1818:15:00

PRIOn knowledge base

www.prio-n.com

5.5 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.8%

JSON

Local registry credentials were included directly in the CD4PE deployment definition, which could expose these credentials to users who should not have access to them. This is resolved in Continuous Delivery for Puppet Enterprise 4.0.1.

CPENameOperatorVersion
continuous_deliveryeq4.0.0

CPE	Name	Operator	Version
	continuous_delivery	eq	4.0.0

References

puppet.com/security/cve/CVE-2020-7945