Puppet

Records130All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical19CVSS 9.0–10.0

CVSS high30CVSS 7.0–8.9

Exploited now

Puppet records in CISA KEV

No Puppet vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

3 records in Puppetdb · all components

TI-2020-06424 CVE-2020-7943 · GHSA-xv72-7w5r-cqjw

MEDIUM 43

Puppet Server and PuppetDB provide useful performance and debugging information via their metrics API endpoints.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.07674 Published 2020-03-11 Fixed in 2018.1.13, 2019.5.0 +4 CWE-276

TI-2021-08594 CVE-2021-27021 · GHSA-j664-pgf6-rhhh

MEDIUM 41

A flaw was discovered in Puppet DB, this flaw results in an escalation of privileges which allows the user to delete tables via an SQL query.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01262 Published 2021-07-20 No fix listed CWE-1027

TI-2021-08592 CVE-2021-27019 · GHSA-7jgx-q4jq-pp55

LOW 21

PuppetDB logging included potentially sensitive system information.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00736 Published 2021-08-30 No fix listed CWE-532