CVE-2021-27022

概要

参考情報

• puppet.com/security/cve/cve-2021-27022 · Vendor Advisory
• puppet.com/security/cve/cve-2021-27022/%5D

puppet のその他の脆弱性

• CVE-2021-27026中 4.4A flaw was divered in Puppet Enterprise and other Puppet products where sensitive plan parameters may be logged
• CVE-2021-27025中 6.5A flaw was discovered in Puppet Agent where the agent may silently ignore Augeas settings or may be vulnerable to a Denial of Service condit…
• CVE-2021-27021高 8.8A flaw was discovered in Puppet DB, this flaw results in an escalation of privileges which allows the user to delete tables via an SQL query…
• CVE-2020-7942中 6.5Previously, Puppet operated on a model that a node with a valid certificate was entitled to all information in the system and that a comprom…
• CVE-2018-6515高 7.8Puppet Agent 1.10.x prior to 1.10.13, Puppet Agent 5.3.x prior to 5.3.7, and Puppet Agent 5.5.x prior to 5.5.2 on Windows only, with a speci…