Puppet Enterprise@2021.0.0 Security Vulnerabilities and Issues — Puppet Enterprise@2021.0.0 CVE List

Lucene search

PuppetPuppet Enterprise2021.0.0

2 matches found

CVE•added 2021/11/18 3:15 p.m.•333 views

CVE-2021-27023

A flaw was discovered in Puppet Agent and Puppet Server that may result in a leak of HTTP credentials when following HTTP redirects to a different host. This is similar to CVE-2018-1000007

9.8CVSS7.8AI score0.02915EPSS

CVE•added 2021/07/20 11:15 a.m.•47 views

CVE-2021-27021

A flaw was discovered in Puppet DB, this flaw results in an escalation of privileges which allows the user to delete tables via an SQL query.

8.8CVSS8.8AI score0.00626EPSS