CVE-2021-27022

Summary

A flaw was discovered in bolt-server and ace where running a task with sensitive parameters results in those sensitive parameters being logged when they should not be. This issue only affects SSH/WinRM nodes (inventory service nodes).

Affected Software

Weaknesses

• CWE-532: [CWE-532: Insertion of Sensitive Information into Log File|https://cwe.mitre.org/data/definitions/532.html]

ADP Enrichment

CVE Program Container

Additional References

• https://puppet.com/security/cve/cve-2021-27022/%5D
• https://puppet.com/security/cve/cve-2021-27022/

References

• https://puppet.com/security/cve/cve-2021-27022/%5D
• https://puppet.com/security/cve/cve-2021-27022/

• ←Previous
• Next→