Login Request a demo
CD
Product
Continuous Delivery
by Puppet · last CVE Nov 18, 2021
4
CVEs
0
On KEV
8.1
Max CVSS
0
New 30D
Vulnerabilities4In the news0Timeline
Severity mix
Critical 0High 2Medium 2Low 0
Severity
All severities4Critical0High2Medium2Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Continuous Delivery to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2021-27024
8.1
1%
Nov 18
A flaw was discovered in Continuous Delivery for Puppet Enterprise (CD4PE) that results in a user with lower privileges being able to access a Puppet Enterprise API token
Affected: before 4.10.0
CVE-2020-7944
7.7
1%
Mar 26
In Continuous Delivery for Puppet Enterprise (CD4PE) before 3.4.0, changes to resources or classes containing Sensitive parameters can result in the Sensitive parameters ending up…
Affected: before 3.4.0
CVE-2019-10695
6.5
1%
Dec 12
When using the cd4pe::root_configuration task to configure a Continuous Delivery for PE installation, the root user’s username and password were exposed in the job’s Job Details…
Affected: before 1.2.1
CVE-2020-7945
5.5
0%
Sep 18
Local registry credentials were included directly in the CD4PE deployment definition, which could expose these credentials to users who should not have access to them
Affected: 4.0.0
Showing 4