puppet -- Silent Configuration Failure

Puppet reports: A flaw was discovered in Puppet Agent where the agent may silently ignore Augeas settings or may be vulnerable to a Denial of Service condition prior to the first pluginsync...

PT-2021-6808

Name of the Vulnerable Software and Affected Versions bolt-server and ace affected versions not specified Puppet affected versions not specified Description A flaw was discovered in bolt-server and ace where running a task with sensitive parameters results in those sensitive parameters being logg...

Puppet Server 日志信息泄露漏洞

Puppet and Puppet Server are both products of Puppet Labs, U.S.A. Puppet is a set of configuration management tools based on a client/server C/S architecture that can be used to manage configuration files, users, cron tasks, packages, system services, and so on.Puppet Server is a software program...

CVE-2021-27020

Puppet Enterprise presented a security risk by not sanitizing user input when doing a CSV export...

CVE-2021-27020

Puppet Enterprise presented a security risk by not sanitizing user input when doing a CSV export...

Input validation

Puppet Enterprise presented a security risk by not sanitizing user input when doing a CSV export...

CVE-2021-27020

Puppet Enterprise presented a security risk by not sanitizing user input when doing a CSV export...

CVE-2021-27020

Puppet Enterprise presented a security risk by not sanitizing user input when doing a CSV export...

UBUNTU-CVE-2021-27020

Puppet Enterprise presented a security risk by not sanitizing user input when doing a CSV export...

CVE-2021-27020

Puppet Enterprise presented a security risk by not sanitizing user input when doing a CSV export...

CVE-2021-27020

Puppet Enterprise presented a security risk by not sanitizing user input when doing a CSV export...

CVE-2021-27020

CVE-2021-27020 affects Puppet Enterprise prior to 2019.8.6, where unsanitized user input during CSV export leads to a security risk. Root cause: input not sanitized in CSV export path. Impact: data exposure/compromise as described; no explicit exploitation details provided in the documents. Mitig...

CVE-2021-27020

Removed by vendor...

PT-2021-6814

Name of the Vulnerable Software and Affected Versions Puppet Enterprise affected versions not specified Description The issue is related to the lack of sanitization of user input when performing a CSV export, which presents a security risk. This allows a remote attacker to access confidential dat...

CVE-2021-27020: Improper Neutralization of Formula Elements in a CSV File

Puppet Enterprise presented a security risk by not sanitizing user input when doing a CSV export...

Puppet 日志信息泄露漏洞

Puppet is a set of configuration management tools based on client/server C/S architecture from Puppet Labs in the United States, which can be used to manage profiles, users, cron tasks, packages, system services, etc. There is a security vulnerability in Puppet Enterprise. No information about th...

Puppet 安全漏洞

Puppet is a client/server C/S architecture based configuration management tool from Puppet Labs, which can be used to manage configuration files, users, cron tasks, packages, system services, etc. Puppet Enterprise is the enterprise version of Puppet. Puppet Enterprise is the enterprise version o...

CVE-2021-27021

A flaw was discovered in Puppet DB, this flaw results in an escalation of privileges which allows the user to delete tables via an SQL query...

CVE-2021-27021

A flaw was discovered in Puppet DB, this flaw results in an escalation of privileges which allows the user to delete tables via an SQL query...

Design/Logic Flaw

A flaw was discovered in Puppet DB, this flaw results in an escalation of privileges which allows the user to delete tables via an SQL query...