CVE-2020-7944

CVE-2020-7944 affects Continuous Delivery for Puppet Enterprise (CD4PE) before 3.4.0. The issue arises when changes to resources or classes containing Sensitive parameters cause those parameters to appear in the impact analysis report. The Red Hat entry confirms the same description. No explicit ...

CVE-2020-7945

CVE-2020-7945 concerns Puppet’s Continuous Delivery for Puppet Enterprise (CD4PE). The connected Red Hat/CVE and NVD entries confirm that local registry credentials were embedded directly in the CD4PE deployment definition, exposing credentials to users who should not have access. The Red Hat des...