← All advisories

Medium severity4.4NVD Advisory· Published Nov 18, 2021· Updated Jun 17, 2026

CVE-2021-27026

CVE-2021-27026

Description

A flaw was divered in Puppet Enterprise and other Puppet products where sensitive plan parameters may be logged

Affected products

5

Puppet (software)/Puppet
cpe:2.3:a:puppet:puppet:*:*:*:*:enterprise:*:*:*
Range: >=2021.0.0,<2021.4.0
Puppet (software)/Puppet Connect
cpe:2.3:a:puppet:puppet_connect:*:*:*:*:*:*:*:*
Range: <0.4.0
Puppet (software)/Puppet Enterprise2 versions
cpe:2.3:a:puppet:puppet_enterprise:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:puppet:puppet_enterprise:*:*:*:*:*:*:*:*range: <2019.8.9
- (no CPE)
Puppet/Enterprise and other Puppet productsdescription

Patches

Vulnerability mechanics

References

1

puppet.com/security/cve/cve-2021-27026nvdVendor Advisory

News mentions

0

No linked articles in our index yet.