CVE-2020-7945: Medium severity puppet continuous delivery vulnerability
Published Sep 18, 2020
·Updated
Local registry credentials were included directly in the CD4PE deployment definition, which could expose these credentials to users who should not have access to them. This is resolved in Continuous Delivery for Puppet Enterprise 4.0.1.
Affected Software
1 affected component
Puppet Continuous Delivery=4.0.0
Event History
Sep 18, 2020
CVE Published
via MITRE·05:58 PM
Data Sourced
via MITRE·05:58 PM
DescriptionWeakness
Frequently Asked Questions
1
What is CVE-2020-7945?
CVE-2020-7945 is a vulnerability in Continuous Delivery for Puppet Enterprise (CD4PE) where local registry credentials were included directly in the deployment definition, potentially exposing them to unauthorized users.
2
How severe is CVE-2020-7945?
CVE-2020-7945 has a severity value of 5.5 (Medium).
3
How can I fix CVE-2020-7945?
You can fix CVE-2020-7945 by upgrading to Continuous Delivery for Puppet Enterprise 4.0.1.