← All advisories

Medium severity6.5NVD Advisory· Published Oct 6, 2023· Updated Jun 17, 2026

CVE-2023-5214

CVE-2023-5214

Description

In Puppet Bolt versions prior to 3.27.4, a path to escalate privileges was identified.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
boltRubyGems	< 3.27.4	3.27.4

Affected products

3

Puppet (software)/Bolt2 versions
cpe:2.3:a:puppet:bolt:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:puppet:bolt:*:*:*:*:*:*:*:*range: <3.27.4
- (no CPE)range: prior to 3.27.4
ghsa-coords
pkg:gem/bolt
Range: < 3.27.4

Patches

Vulnerability mechanics

References

5

github.com/advisories/GHSA-289m-2964-f8q5ghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2023-5214ghsaADVISORY
www.puppet.com/security/cve/cve-2023-5214-privilege-escalation-puppet-boltnvdVendor AdvisoryWEB
github.com/rubysec/ruby-advisory-db/blob/master/gems/bolt/CVE-2023-5214.ymlghsaWEB
www.puppet.com/security/cve/cve-2023-5255-denial-service-revocation-auto-renewed-certificatesghsaWEB

News mentions

0

No linked articles in our index yet.