medium4.9
CVE-2021-27022
A flaw was discovered in bolt-server and ace where running a task with sensitive parameters results in those sensitive parameters being logged when they should…
Impact
A flaw was discovered in bolt-server and ace where running a task with sensitive parameters results in those sensitive parameters being logged when they should not be. This issue only affects SSH/WinRM nodes (inventory service nodes).
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Puppet | Puppet | from 2021.0.0 before 2021.3.0 |
| Puppet | Puppet Enterprise | before 2019.8.8 |