CVE-2021-27024 | BDVDB-2026-164571 Detail

Puppet Continuous Delivery for Puppet Enterprise (CD4PE)

Description#

A flaw was discovered in Continuous Delivery for Puppet Enterprise (CD4PE) that results in a user with lower privileges being able to access a Puppet Enterprise API token. This issue is resolved in CD4PE 4.10.0

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://puppet.com/security/cve/cve-2021-27024

Exploit#

No public exploit known

History#

Version 12021-11-18Record published in the CVE List.
Version 22024-08-03Most recent update recorded in the CVE List.