← CVE Intelligence

CVE-2019-10695

n/a / Continuous Delivery for Puppet Enterprise (CD4PE) PUBLISHED

Description (CNA)

When using the cd4pe::root_configuration task to configure a Continuous Delivery for PE installation, the root user’s username and password were exposed in the job’s Job Details pane in the PE console. These issues have been resolved in version 1.2.1 of the puppetlabs/cd4pe module.

Affected (CNA)

Vendor / productVersions
n/a / Continuous Delivery for Puppet Enterprise (CD4PE)affected puppetlabs/cd4pe module prior to 1.2.1

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.