Security Advisory

CVE-2021-27024

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2021-11-18 14:23:56
Last updated 2024-08-03 20:40:47
Assigner puppet
State PUBLISHED

Description

A flaw was discovered in Continuous Delivery for Puppet Enterprise (CD4PE) that results in a user with lower privileges being able to access a Puppet Enterprise API token. This issue is resolved in CD4PE 4.10.0