Puppet Enterprise 2019.8.8

CPE Details

Puppet Enterprise 2019.8.8
puppet
puppet_enterprise
2019.8.8
2022-01-24
15h35 +00:00
2022-01-24
15h43 +00:00
CPE NVD
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
Notifications manage

CPE Name: cpe:2.3:a:puppet:puppet_enterprise:2019.8.8:*:*:*:*:*:*:*

Informations

Vendor

puppet

Product

puppet_enterprise

Version

2019.8.8

Related CVE

Open and find in CVE List

CVE ID Published Description Score Severity
CVE-2023-5309 2023-11-07 19h01 +00:00 Versions of Puppet Enterprise prior to 2021.7.6 and 2023.5 contain a flaw which results in broken session management for SAML implementations.
9.8
Critical
CVE-2021-27023 2021-11-18 13h33 +00:00 A flaw was discovered in Puppet Agent and Puppet Server that may result in a leak of HTTP credentials when following HTTP redirects to a different host. This is similar to CVE-2018-1000007
9.8
Critical
CVE-2021-27025 2021-11-18 13h30 +00:00 A flaw was discovered in Puppet Agent where the agent may silently ignore Augeas settings or may be vulnerable to a Denial of Service condition prior to the first 'pluginsync'.
6.5
Medium
CVE-2021-27026 2021-11-18 13h27 +00:00 A flaw was divered in Puppet Enterprise and other Puppet products where sensitive plan parameters may be logged
4.4
Medium
The information presented on CVE Find originates from several carefully selected reference sources. CVE data is provided by MITRE Corporation and the National Vulnerability Database (NVD). The Known Exploited Vulnerabilities (KEV) catalog is sourced from the Cybersecurity and Infrastructure Security Agency (CISA), while EPSS scores come from FIRST.org. Additionally, data regarding software weaknesses (CWE) and common attack patterns (CAPEC) is maintained by MITRE Corporation, and information on hardware and software configurations (CPE) is provided by the NVD.