← Retour aux CVEs
CVE-2021-27021
HIGH8.8
Description
A flaw was discovered in Puppet DB, this flaw results in an escalation of privileges which allows the user to delete tables via an SQL query.
Details CVE
Score CVSS v3.18.8
SeveriteHIGH
Vecteur CVSSCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Vecteur d'attaqueNETWORK
ComplexiteLOW
Privileges requisLOW
Interaction utilisateurNONE
Publie7/20/2021
Derniere modification11/21/2024
Sourcenvd
Observations honeypot0
Produits affectes
puppet:puppetpuppet:puppet_enterprisepuppet:puppetdb
Faiblesses (CWE)
CWE-1027CWE-89
References
https://puppet.com/security/cve/cve-2021-27021/(security@puppet.com)
https://puppet.com/security/cve/cve-2021-27021/(af854a3a-2127-422b-91ae-364da2661108)
Correlations IOC
Aucune correlation enregistree
This product uses data from the NVD API but is not endorsed or certified by the NVD.