Read the docs

Puppet

Records130All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical19CVSS 9.0–10.0
CVSS high30CVSS 7.0–8.9

Exploited now

Puppet records in CISA KEV

No Puppet vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Puppet Enterprise 89 records HIGH Puppet 42 records MEDIUM Puppet Agent 8 records MEDIUM Puppet Server 7 records MEDIUM Continuous Delivery 4 records LOW Marionette Collective 3 records MEDIUM Puppetdb 3 records MEDIUM Puppetlabs-mysql 3 records MEDIUM

Records

4 records in Continuous Delivery · all components

TI-2020-06425 CVE-2020-7944 · GHSA-f2pg-7264-3hcf

Information disclosure in Continuous Delivery for Puppet Enterprise

Priority LOW 35

In Continuous Delivery for Puppet Enterprise (CD4PE) before 3.4.0, changes to resources or classes containing Sensitive parameters can result in the Sensitive parameters ending up in the impact analysis report.

CVSS 3.1HIGH 7.7 Network Low privileges No interaction EPSS 0.00859 Published 2020-03-26 No fix listed CWE-200
TI-2019-07983 CVE-2019-10695 · GHSA-6gj6-8rp5-3qch

Sensitive information in log files in Continuous Delivery for Puppet Enterprise

Priority LOW 30

When using the cd4pe::root_configuration task to configure a Continuous Delivery for PE installation, the root user’s username and password were exposed in the job’s Job Details pane in the PE console.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00877 Published 2019-12-11 No fix listed CWE-532
Open these records in search →