CVE-2021-27022
published 2021-09-07CVE-2021-27022: A flaw was discovered in bolt-server and ace where running a task with sensitive parameters results in those sensitive parameters being logged when they should…
medium4.9CVSS 3.1
AVNACLPRHUINSUCHINAN
A flaw was discovered in bolt-server and ace where running a task with sensitive parameters results in those sensitive parameters being logged when they should not be. This issue only affects SSH/WinRM nodes (inventory service nodes).
Affected
4 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | puppet | — | — |
| puppet | puppet | >= 2021.0.0 < 2021.3.0 | 2021.3.0 |
| puppet | puppet_enterprise | < 2019.8.8 | 2019.8.8 |
| puppet | puppet_enterprise | — | — |
CVSS provenance
nvdv3.14.9MEDIUMCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
osv4.9MEDIUM