CVE-2020-7944

In Continuous Delivery for Puppet Enterprise (CD4PE) before 3.4.0, changes to resources or classes containing Sensitive parameters can result in the Sensitive parameters ending up in the impact analysis report.
References
Link Resource
https://puppet.com/security/cve/CVE-2020-7944 Vendor Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:puppet:continuous_delivery:*:*:*:*:*:puppet_enterprise:*:*

History

No history.

Information

Published : 2020-03-26 15:15

Updated : 2024-02-28 17:47


NVD link : CVE-2020-7944

Mitre link : CVE-2020-7944

CVE.ORG link : CVE-2020-7944


JSON object : View

Products Affected

puppet

  • continuous_delivery
CWE
CWE-200

Exposure of Sensitive Information to an Unauthorized Actor