CVE-2023-5214

Summary

In Puppet Bolt versions prior to 3.27.4, a path to escalate privileges was identified.

Affected Software

Weaknesses

• CWE-269: CWE-269 Improper Privilege Management

ADP Enrichment

CVE Program Container

Additional References

• https://www.puppet.com/security/cve/cve-2023-5214-privilege-escalation-puppet-bolt

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: partial

References

• https://www.puppet.com/security/cve/cve-2023-5214-privilege-escalation-puppet-bolt

• ←Previous
• Next→