Skip to content
OpenAdvisories

Product · Perforce

Puppet Enterprise

6 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.7
    CVE-2026-8804

    Cleartext Storage of Sensitive Information for Puppet Resource API

    Puppet resource_api (shipped in Puppet Core 8.x and Puppet Enterprise 2023.8.x and 2025.x) does not preserve the sensitive flag on parameters defined via the resource-api, causing values such as passwords to be stored in cleartext in the agent's local transac…

    Perforce Puppet Enterprise Puppet Core ruby-puppet-resource-api Debian Ubuntu
  • Medium 6.9
    CVE-2025-10360

    Insufficiently Protected Credentials in Puppet Enterprise 2025.4 and 2025.5

    In Puppet Enterprise versions 2025.4.0 and 2025.5, the encryption key used for encrypting content in the Infra Assistant database was not excluded from the files gathered by Puppet backup. The key is only present on the system if the user has a Puppet Enterpr…

    Perforce Puppet Enterprise