Continuous Delivery for Puppet Enterprise October 2019 Security Fixes

CVSS 3 Base Score:

Posted On:

October 21, 2019

Assessed Risk Level:

High

Multiple vulnerabilities were discovered in CD4PE third party dependencies.

The following CVEs have been resolved in CD4PE 2.18.2 and 2.18.3:

Critical (CVSS v3.0 Rating 9.0-10.0)

• CVE-2017-5645
• CVE-2017-7525
• CVE-2018-19360
• CVE-2018-19361
• CVE-2018-19362
• CVE-2018-1000134

High (CVSS v3.0 Rating 7.0-8.9)

• CVE-2014-0114
• CVE-2015-2156
• CVE-2017-9801
• CVE-2018-1294
• CVE-2019-9512
• CVE-2019-9514
• CVE-2019-9515
• CVE-2019-9518
• CVE-2019-16869

Medium (CVSS v3.0 Rating 4.0-6.9)

• CVE-2015-0886
• CVE-2016-5725
• CVE-2018-10237
• CVE-2018-20200
• CVE-2018-1002201
• CVE-2019-10241
• CVE-2019-10246
• CVE-2019-10247

Status: