Approved changes feed: RSS · Atom

cpe:2.3:a:perforce:puppet_bolt:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorPerforce (b6773f0f-3a72-52f1-9555-ff325a988421)
ProductPuppet Bolt (9f9fe032-9676-5247-883a-236235b1454c)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/puppetlabs/bolt purl2cpe 2026-06-01 10:17:50.771047

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-2394 vulnerable 2026-06-03 14:47:06.251281 Sensitive Parameter Exposure in Puppet Bolt prior to 3.24
MEDIUM (4.1)
Puppet Bolt prior to version 3.24.0 will print sensitive parameters when planning a run resulting in them potentially being logged when run programmatically, such as via Puppet Enterprise.
Published: 2022-07-19T17:46:48.011Z
Updated: 2024-09-16T20:22:09.334Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.