CVSS 3 Base Score:
9.9

Posted On:

Assessed Risk Level:
Critical

A privilege escalation allowing remote code execution was discovered in the orchestration service.

Status:

Affected software versions:
  • Puppet Enterprise 2021.7.0 through Puppet Enterprise 2021.7.3 
  • Puppet Enterprise 2023.0 and Puppet Enterprise 2023.1 
Resolved in:
  • Puppet Enterprise 2021.7.4 
  • Puppet Enterprise 2023.2 
← Back to CVE Listings