Information Disclosure

puppet is vulnerable to information disclosures. The application does not specify which environment a specific agent should be able to access, allowing an agent to retrieve sensitive facts from an unauthorized environment...