Vulnerability Details CVE-2021-27024
A flaw was discovered in Continuous Delivery for Puppet Enterprise (CD4PE) that results in a user with lower privileges being able to access a Puppet Enterprise API token. This issue is resolved in CD4PE 4.10.0
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 54.4%
CVSS Severity
CVSS v3 Score 8.1
CVSS v2 Score 5.5
References
Products affected by CVE-2021-27024
-
cpe:2.3:a:puppet:continuous_delivery:4.0.0
-
cpe:2.3:a:puppet:continuous_delivery:4.0.1