Continuous Delivery@* Security Vulnerabilities and Issues — Continuous Delivery@* CVE List

Lucene search

PuppetContinuous Delivery*

3 matches found

CVE•added 2019/12/12 12:15 a.m.•111 views

CVE-2019-10695

When using the cd4pe::root_configuration task to configure a Continuous Delivery for PE installation, the root user’s username and password were exposed in the job’s Job Details pane in the PE console. These issues have been resolved in version 1.2.1 of the puppetlabs/cd4pe module.

6.5CVSS6.7AI score0.00405EPSS

CVE•added 2020/03/26 3:15 p.m.•48 views

CVE-2020-7944

In Continuous Delivery for Puppet Enterprise (CD4PE) before 3.4.0, changes to resources or classes containing Sensitive parameters can result in the Sensitive parameters ending up in the impact analysis report.

7.7CVSS7.5AI score0.00405EPSS

CVE•added 2021/11/18 3:15 p.m.•34 views

CVE-2021-27024

A flaw was discovered in Continuous Delivery for Puppet Enterprise (CD4PE) that results in a user with lower privileges being able to access a Puppet Enterprise API token. This issue is resolved in CD4PE 4.10.0

8.1CVSS7.7AI score0.00317EPSS