Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:27704
HistoryOct 28, 2020 - 5:49 p.m.

Information Disclosure

2020-10-2817:49:09
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
20
puppet vulnerability
information disclosure
metrics api
attacker access
localhost security

EPSS

0.104

Percentile

95.0%

puppet is vulnerable to information disclosure. The vulnerability exists due to leak sensitive information via metrics API which allows an attacker to access on localhost by default.