Puppet Continuous Delivery
4 CVEs affecting Puppet Continuous Delivery. Latest disclosed: 2021-11-18. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-27024 | High | 8.1 | 2021-11-18 | A flaw was discovered in Continuous Delivery for Puppet Enterprise (CD4PE) that results in a user with lower privileges being able to access a Puppet Enterpris… |
CVE-2020-7944 | High | 7.7 | 2020-03-26 | In Continuous Delivery for Puppet Enterprise (CD4PE) before 3.4.0, changes to resources or classes containing Sensitive parameters can result in the Sensitive… |
CVE-2019-10695 | Medium | 6.5 | 2019-12-12 | When using the cd4pe::root_configuration task to configure a Continuous Delivery for PE installation, the root user’s username and password were exposed in the… |
CVE-2020-7945 | Medium | 5.5 | 2020-09-18 | Local registry credentials were included directly in the CD4PE deployment definition, which could expose these credentials to users who should not have access… |