CVE-2020-7944

In Continuous Delivery for Puppet Enterprise (CD4PE) before 3.4.0, changes to resources or classes containing Sensitive parameters can result in the Sensitive parameters ending up in the impact analysis report.

Score

CVSS 3.1 7.7 High

Status

Modified - security@puppet.com

Published

2020-03-26

Last modified

2024-08-04

Weaknesses

CWE-200, CWE-538

Affected products

• Continuous Delivery (Puppet)

References

• https://puppet.com/security/cve/CVE-2020-7944