Skip to content
OpenAdvisories

Product · Puppet

Bolt

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.5
    CVE-2023-5214

    CVE-2023-5214 - Privilege Escalation in Puppet Bolt

    In Puppet Bolt versions prior to 3.27.4, a path to escalate privileges was identified.

    Puppet Bolt bolt RubyGems
  • Medium 4.1
    CVE-2022-2394

    Sensitive Parameter Exposure in Puppet Bolt prior to 3.24

    Puppet Bolt prior to version 3.24.0 will print sensitive parameters when planning a run resulting in them potentially being logged when run programmatically, such as via Puppet Enterprise.

    Puppet Bolt