Unrated severityNVD Advisory· Published Sep 18, 2020· Updated Aug 4, 2024

CVE-2020-7945

Description

Local registry credentials were included directly in the CD4PE deployment definition, which could expose these credentials to users who should not have access to them. This is resolved in Continuous Delivery for Puppet Enterprise 4.0.1.

Affected products

Puppet (software)/Continuous Delivery For Peinferred2 versions
<4.0.1+ 1 more
- (no CPE)range: <4.0.1
- (no CPE)range: <4.0.1

Patches

Vulnerability mechanics

References

puppet.com/security/cve/CVE-2020-7945mitrex_refsource_MISC

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000