Approved changes feed: RSS · Atom

cpe:2.3:a:puppet:continuous_delivery:*:*:*:*:*:puppet_enterprise:*:*

part: a version: * update: *

VendorPuppet (056a1ba3-12b3-5ecf-a97f-ab3b403c7816)
ProductContinuous Delivery (a48e0970-78ba-5313-a14a-c6bde98d88ca)
Edition*
Language*
Software edition*
Target softwarepuppet_enterprise
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-7944 vulnerable 2026-06-03 14:43:07.775727 Details available
In Continuous Delivery for Puppet Enterprise (CD4PE) before 3.4.0, changes to resources or classes containing Sensitive parameters can result in the Sensitive parameters ending up in the impact analysis report.
Published: 2020-03-26T14:16:44.000Z
Updated: 2024-08-04T09:48:24.523Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-10695 vulnerable 2026-06-03 14:39:24.057194 Details available
When using the cd4pe::root_configuration task to configure a Continuous Delivery for PE installation, the root user’s username and password were exposed in the job’s Job Details pane in the PE console. These issues have been resolved in version 1.2.1 of the puppetlabs/cd4pe module.
Published: 2019-12-11T23:04:57.000Z
Updated: 2024-08-04T22:32:01.196Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.