Vulnerabilities

TI-2021-08592 CVE-2021-27019 · GHSA-7jgx-q4jq-pp55

PuppetDB logging included potentially sensitive system information.

LOW 21

PuppetDB logging included potentially sensitive system information.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00736 Published 2021-08-30 No fix listed CWE-532

TI-2021-08594 CVE-2021-27021 · GHSA-j664-pgf6-rhhh

MEDIUM 41

A flaw was discovered in Puppet DB, this flaw results in an escalation of privileges which allows the user to delete tables via an SQL query.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01262 Published 2021-07-20 No fix listed CWE-1027

TI-2020-06424 CVE-2020-7943 · GHSA-xv72-7w5r-cqjw

MEDIUM 43

Puppet Server and PuppetDB provide useful performance and debugging information via their metrics API endpoints.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.07674 Published 2020-03-11 Fixed in 2018.1.13, 2019.5.0 +4 CWE-276