CVE-2021-27021: SQL Injection
A flaw was discovered in Puppet DB, this flaw results in an escalation of privileges which allows the user to delete tables via an SQL query.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2021-27021?
CVE-2021-27021 is a vulnerability discovered in Puppet DB that allows an attacker to escalate privileges and delete tables through an SQL query.
What is the severity of CVE-2021-27021?
CVE-2021-27021 has a severity level of 8.8 (high).
Which software versions are affected by CVE-2021-27021?
CVE-2021-27021 affects Puppet versions up to and excluding 6.23.0, Puppet versions between 7.7.0 and 7.8.0, Puppet Enterprise versions up to and excluding 2019.8.7, Puppet Enterprise versions between 2021.0.0 and 2021.2.0, Puppetdb versions up to and excluding 6.17.0, and Puppetdb versions between 7.0.0 and 7.4.1.
How can CVE-2021-27021 be fixed?
To fix CVE-2021-27021, users should upgrade to a version of Puppet or Puppet Enterprise that is not affected by the vulnerability.
Where can I find more information about CVE-2021-27021?
More information about CVE-2021-27021 can be found at the following link: https://puppet.com/security/cve/cve-2021-27021/