← CVE Intelligence

CVE-2021-27024

n/a / Puppet Continuous Delivery for Puppet Enterprise (CD4PE) PUBLISHED

Description (CNA)

A flaw was discovered in Continuous Delivery for Puppet Enterprise (CD4PE) that results in a user with lower privileges being able to access a Puppet Enterprise API token. This issue is resolved in CD4PE 4.10.0

Affected (CNA)

Vendor / productVersions
n/a / Puppet Continuous Delivery for Puppet Enterprise (CD4PE)affected CD4PE prior to 4.10.0

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.