Puppetdb

3 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2021-27019 MEDIUM This Month

PuppetDB logging included potentially sensitive system information. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Information Disclosure Puppet Enterprise Puppetdb

NVD

CVSS 3.1

4.3

EPSS

0.7%

CVE-2021-27021 HIGH This Week

A flaw was discovered in Puppet DB, this flaw results in an escalation of privileges which allows the user to delete tables via an SQL query. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Privilege Escalation Puppet Puppet Enterprise Puppetdb

NVD

CVSS 3.1

8.8

EPSS

1.3%

CVE-2020-7943 HIGH POC This Week

Puppet Server and PuppetDB provide useful performance and debugging information via their metrics API endpoints. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Privilege Escalation Puppet Enterprise Puppet Server Puppetdb

NVD

CVSS 3.1

7.5

EPSS

7.9%

CVE-2021-27019

EPSS 1% CVSS 4.3

MEDIUM This Month

PuppetDB logging included potentially sensitive system information. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Information Disclosure Puppet Enterprise Puppetdb

NVD

CVE-2021-27021

EPSS 1% CVSS 8.8

HIGH This Week

Privilege Escalation Puppet Puppet Enterprise +1

NVD

CVE-2020-7943

EPSS 8% CVSS 7.5

HIGH POC This Week

Privilege Escalation Puppet Enterprise Puppet Server +1

NVD