Skip to content
OpenAdvisories
Unscored CVE-2021-27024 EUVD-2021-13796GHSA-gmmf-cc7v-f9hw

A flaw was discovered in Continuous Delivery for Puppet Enterprise (CD4PE) that results in a user with lower privileges being able to acces…

Published Nov 18, 2021 · Updated Aug 3, 2024 · Assigned by puppet

Description

A flaw was discovered in Continuous Delivery for Puppet Enterprise (CD4PE) that results in a user with lower privileges being able to access a Puppet Enterprise API token. This issue is resolved in CD4PE 4.10.0

Affected products

VendorProductAffectedFixed
— Puppet Continuous Delivery for Puppet Enterprise (CD4PE) CD4PE prior to 4.10.0 —

References