Skip to content
OpenAdvisories
Medium · 4.1 CVE-2022-2394 EUVD-2022-34659GHSA-prvj-qfjv-3x3f

Sensitive Parameter Exposure in Puppet Bolt prior to 3.24

Published Jul 19, 2022 · Updated Sep 16, 2024 · Assigned by puppet

Description

Puppet Bolt prior to version 3.24.0 will print sensitive parameters when planning a run resulting in them potentially being logged when run programmatically, such as via Puppet Enterprise.

Affected products

VendorProductAffectedFixed
Puppet Bolt 3.24.0 —

References