CVE-2021-27022: Medium severity puppet vulnerability
A flaw was discovered in bolt-server and ace where running a task with sensitive parameters results in those sensitive parameters being logged when they should not be. This issue only affects SSH/WinRM nodes (inventory service nodes).
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID for this flaw?
The vulnerability ID for this flaw is CVE-2021-27022.
What software is affected by this vulnerability?
The affected software includes Puppet Puppet versions between 2021.0.0 and 2021.3.0, as well as Puppet Puppet Enterprise versions up to 2019.8.8.
What is the severity rating of CVE-2021-27022?
CVE-2021-27022 has a severity rating of 4.9, which is considered medium.
What is the description of this vulnerability?
A flaw was discovered in bolt-server and ace where running a task with sensitive parameters results in those sensitive parameters being logged when they should not be. This issue only affects SSH/WinRM nodes (inventory service nodes).
How can I find more information about CVE-2021-27022?
You can find more information about CVE-2021-27022 on the Puppet Security website at https://puppet.com/security/cve/cve-2021-27022/.