3 matches found
Design/Logic Flaw
A flaw was discovered in Continuous Delivery for Puppet Enterprise CD4PE that results in a user with lower privileges being able to access a Puppet Enterprise API token. This issue is resolved in CD4PE 4.10.0...
5.5CVSS7.7AI score0.00792EPSS
SaveExploits0References1Affected Software1
CVE-2020-7944
In Continuous Delivery for Puppet Enterprise CD4PE before 3.4.0, changes to resources or classes containing Sensitive parameters can result in the Sensitive parameters ending up in the impact analysis report...
7.7CVSS7.6AI score0.00859EPSS
SaveExploits0References1
CVE-2020-7944
In Continuous Delivery for Puppet Enterprise CD4PE before 3.4.0, changes to resources or classes containing Sensitive parameters can result in the Sensitive parameters ending up in the impact analysis report...
7.6AI score0.00859EPSS
SaveExploits0References1
20