← All advisories

High severity8.8NVD Advisory· Published Jul 20, 2021· Updated Jun 17, 2026

CVE-2021-27021

CVE-2021-27021

Description

A flaw was discovered in Puppet DB, this flaw results in an escalation of privileges which allows the user to delete tables via an SQL query.

Affected products

5

Puppet (software)/Puppet2 versions
cpe:2.3:a:puppet:puppet:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:puppet:puppet:*:*:*:*:*:*:*:*range: <6.23.0
- (no CPE)
Puppet (software)/Puppet Enterprise
cpe:2.3:a:puppet:puppet_enterprise:*:*:*:*:*:*:*:*
Range: <2019.8.7
Puppet (software)/Puppetdb
cpe:2.3:a:puppet:puppetdb:*:*:*:*:*:*:*:*
Range: <6.17.0
Puppet/Puppet DBdescription

Patches

Vulnerability mechanics

References

1

puppet.com/security/cve/cve-2021-27021/nvdVendor Advisory

News mentions

0

No linked articles in our index yet.