CVE-2021-27021

概要

参考情報

• puppet.com/security/cve/cve-2021-27021 · Vendor Advisory

puppet のその他の脆弱性

• CVE-2021-27026中 4.4A flaw was divered in Puppet Enterprise and other Puppet products where sensitive plan parameters may be logged
• CVE-2021-27025中 6.5A flaw was discovered in Puppet Agent where the agent may silently ignore Augeas settings or may be vulnerable to a Denial of Service condit…
• CVE-2021-27022中 4.9A flaw was discovered in bolt-server and ace where running a task with sensitive parameters results in those sensitive parameters being logg…
• CVE-2020-7942中 6.5Previously, Puppet operated on a model that a node with a valid certificate was entitled to all information in the system and that a comprom…
• CVE-2018-6515高 7.8Puppet Agent 1.10.x prior to 1.10.13, Puppet Agent 5.3.x prior to 5.3.7, and Puppet Agent 5.5.x prior to 5.5.2 on Windows only, with a speci…