NetSight
high8.8

CVE-2021-27021

A flaw was discovered in Puppet DB, this flaw results in an escalation of privileges which allows the user to delete tables via an SQL query.

Impact

A flaw was discovered in Puppet DB, this flaw results in an escalation of privileges which allows the user to delete tables via an SQL query.

Affected products

VendorProductAffected versions
PuppetPuppet
before 6.23.0
from 7.7.0 before 7.8.0
PuppetPuppet Enterprise
before 2019.8.7
from 2021.0.0 before 2021.2.0
PuppetPuppetdb
before 6.17.0
from 7.0.0 before 7.4.1

Weakness classification

References