| Package | Affected versions | Patched versions |
|---|---|---|
| puppet | ≥ 2021.0.0, < 2021.3.0 | 2021.3.0 |
| puppet enterprise | < 2019.8.8 | 2019.8.8 |
A flaw was discovered in bolt-server and ace where running a task with sensitive parameters results in those sensitive parameters being logged when they should not be. This issue only affects SSH/WinRM nodes (inventory service nodes).
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free