Puppet Puppetdb
3 CVEs affecting Puppet Puppetdb. Latest disclosed: 2021-08-30. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-27021 | High | 8.8 | 2021-07-20 | A flaw was discovered in Puppet DB, this flaw results in an escalation of privileges which allows the user to delete tables via an SQL query. |
CVE-2020-7943 | High | 7.5 | 2020-03-11 | Puppet Server and PuppetDB provide useful performance and debugging information via their metrics API endpoints. For PuppetDB this may contain things like host… |
CVE-2021-27019 | Medium | 4.3 | 2021-08-30 | PuppetDB logging included potentially sensitive system information. |