Vulnerabilities > CVE-2020-7943 - Unspecified vulnerability in Puppet Server

CVSS 7.5 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

HIGH

Integrity impact

NONE

Availability impact

NONE

network

low complexity

puppet

nessus

NVD

Published: 2020-03-11

Updated: 2022-01-24

Summary

Puppet Server and PuppetDB provide useful performance and debugging information via their metrics API endpoints. For PuppetDB this may contain things like hostnames. Puppet Server reports resource names and titles for defined types (which may contain sensitive information) as well as function names and class names. Previously, these endpoints were open to the local network. PE 2018.1.13 & 2019.5.0, Puppet Server 6.9.2 & 5.3.12, and PuppetDB 6.9.1 & 5.2.13 disable trapperkeeper-metrics /v1 metrics API and only allows /v2 access on localhost by default. This affects software versions: Puppet Enterprise 2018.1.x stream prior to 2018.1.13 Puppet Enterprise prior to 2019.5.0 Puppet Server prior to 6.9.2 Puppet Server prior to 5.3.12 PuppetDB prior to 6.9.1 PuppetDB prior to 5.2.13 Resolved in: Puppet Enterprise 2018.1.13 Puppet Enterprise 2019.5.0 Puppet Server 6.9.2 Puppet Server 5.3.12 PuppetDB 6.9.1 PuppetDB 5.2.13

Vulnerable Configurations

Part	Description	Count
Application	Puppet Puppet Puppet Server - Puppet Puppet Server 0.1.2 Puppet Puppet Server 0.1.3 Puppet Puppet Server 0.1.4 Puppet Puppet Server 0.1.5 Puppet Puppet Server 0.1.6 Puppet Puppet Server 0.1.7 Puppet Puppet Server 0.1.8 Puppet Puppet Server 0.1.9 Puppet Puppet Server 0.1.10 Puppet Puppet Server 0.1.11 Puppet Puppet Server 0.1.12 Puppet Puppet Server 0.1.13 Puppet Puppet Server 0.1.14 Puppet Puppet Server 0.1.15 Puppet Puppet Server 0.1.16 Puppet Puppet Server 0.2.0 Puppet Puppet Server 0.2.1 Puppet Puppet Server 0.2.2 Puppet Puppet Server 0.3.0 Puppet Puppet Server 0.4.0 Puppet Puppet Server 0.4.1 Puppet Puppet Server 1.0.0 Puppet Puppet Server 1.0.1 Puppet Puppet Server 1.0.2 Puppet Puppet Server 1.0.3 Puppet Puppet Server 1.0.8 Puppet Puppet Server 1.1.0 Puppet Puppet Server 1.1.1 Puppet Puppet Server 1.1.2 Puppet Puppet Server 1.1.3 Puppet Puppet Server 1.2.0 Puppet Puppet Server 2.0.0 Puppet Puppet Server 2.1.0 Puppet Puppet Server 2.1.1 Puppet Puppet Server 2.1.2 Puppet Puppet Server 2.1.3 Puppet Puppet Server 2.2.0 Puppet Puppet Server 2.2.1 Puppet Puppet Server 2.3.0 Puppet Puppet Server 2.3.1 Puppet Puppet Server 2.3.2 Puppet Puppet Server 2.4.0 Puppet Puppet Server 2.5.0 Puppet Puppet Server 2.6.0 Puppet Puppet Server 2.6.1 Puppet Puppet Server 2.7.0 Puppet Puppet Server 2.7.1 Puppet Puppet Server 2.7.2 Puppet Puppet Server 2.8.0 Puppet Puppet Server 2.8.1 Puppet Puppet Server 5.0.0 Puppet Puppet Server 5.1.0 Puppet Puppet Server 5.1.1 Puppet Puppet Server 5.1.2 Puppet Puppet Server 5.1.3 Puppet Puppet Server 5.1.4 Puppet Puppet Server 5.1.5 Puppet Puppet Server 5.1.6 Puppet Puppet Server 5.2.0 Puppet Puppet Server 5.3.0 Puppet Puppet Server 5.3.1 Puppet Puppet Server 5.3.2 Puppet Puppet Server 5.3.3 Puppet Puppet Server 5.3.4 Puppet Puppet Server 5.3.5 Puppet Puppet Server 5.3.6 Puppet Puppet Server 5.3.7 Puppet Puppet Server 5.3.8 Puppet Puppet Server 5.3.9 Puppet Puppet Server 5.3.10 Puppet Puppet Server 5.3.11 Puppet Puppet Server 5.3.12 Puppet Puppet Server 6.0.0 Puppet Puppet Server 6.0.1 Puppet Puppet Server 6.0.2 Puppet Puppet Server 6.0.3 Puppet Puppet Server 6.0.4 Puppet Puppet Server 6.0.5 Puppet Puppet Server 6.1.0 Puppet Puppet Server 6.2.0 Puppet Puppet Server 6.2.1 Puppet Puppet Server 6.3.0 Puppet Puppet Server 6.3.1 Puppet Puppet Server 6.3.2 Puppet Puppet Server 6.3.3 Puppet Puppet Server 6.4.0 Puppet Puppet Server 6.5.0 Puppet Puppet Server 6.6.0 Puppet Puppet Server 6.7.0 Puppet Puppet Server 6.7.1 Puppet Puppet Server 6.7.2 Puppet Puppet Server 6.8.0 Puppet Puppet Server 6.9.0 Puppet Puppet Server 6.9.1 Puppet Puppetdb 0.9.0 Puppet Puppetdb 0.9.1 Puppet Puppetdb 0.9.2 Puppet Puppetdb 0.10.0 Puppet Puppetdb 0.11.0 Puppet Puppetdb 1.0.0 Puppet Puppetdb 1.0.1 Puppet Puppetdb 1.0.2 Puppet Puppetdb 1.0.3 Puppet Puppetdb 1.0.4 Puppet Puppetdb 1.0.5 Puppet Puppetdb 1.1.0 Puppet Puppetdb 1.1.1 Puppet Puppetdb 1.2.0 Puppet Puppetdb 1.3.0 Puppet Puppetdb 1.3.1 Puppet Puppetdb 1.3.2 Puppet Puppetdb 1.3.3 Puppet Puppetdb 1.4.0 Puppet Puppetdb 1.5.0 Puppet Puppetdb 1.5.1 Puppet Puppetdb 1.5.2 Puppet Puppetdb 1.6.0 Puppet Puppetdb 1.6.1 Puppet Puppetdb 1.6.2 Puppet Puppetdb 1.6.3 Puppet Puppetdb 2.0.0 Puppet Puppetdb 2.1.0 Puppet Puppetdb 2.2.0 Puppet Puppetdb 2.2.1 Puppet Puppetdb 2.2.2 Puppet Puppetdb 2.3.0 Puppet Puppetdb 2.3.1 Puppet Puppetdb 2.3.2 Puppet Puppetdb 2.3.3 Puppet Puppetdb 2.3.4 Puppet Puppetdb 2.3.5 Puppet Puppetdb 2.3.6 Puppet Puppetdb 2.3.7 Puppet Puppetdb 2.3.8 Puppet Puppetdb 3.0.0 Puppet Puppetdb 3.0.1 Puppet Puppetdb 3.0.2 Puppet Puppetdb 3.1.0 Puppet Puppetdb 3.1.1 Puppet Puppetdb 3.2.0 Puppet Puppetdb 3.2.1 Puppet Puppetdb 3.2.2 Puppet Puppetdb 3.2.3 Puppet Puppetdb 3.2.4 Puppet Puppetdb 4.0.0 Puppet Puppetdb 4.0.1 Puppet Puppetdb 4.0.2 Puppet Puppetdb 4.1.0 Puppet Puppetdb 4.1.1 Puppet Puppetdb 4.1.2 Puppet Puppetdb 4.1.3 Puppet Puppetdb 4.1.4 Puppet Puppetdb 4.2.0 Puppet Puppetdb 4.2.1 Puppet Puppetdb 4.2.2 Puppet Puppetdb 4.2.3 Puppet Puppetdb 4.2.3.1 Puppet Puppetdb 4.2.3.2 Puppet Puppetdb 4.2.3.5 Puppet Puppetdb 4.2.3.6 Puppet Puppetdb 4.2.3.7 Puppet Puppetdb 4.2.3.8 Puppet Puppetdb 4.2.4 Puppet Puppetdb 4.2.5 Puppet Puppetdb 4.3.0 Puppet Puppetdb 4.3.1 Puppet Puppetdb 4.3.2 Puppet Puppetdb 4.4.0 Puppet Puppetdb 4.4.1 Puppet Puppetdb 4.4.2 Puppet Puppetdb 5.0.0 Puppet Puppetdb 5.0.1 Puppet Puppetdb 5.1.0 Puppet Puppetdb 5.1.1 Puppet Puppetdb 5.1.2 Puppet Puppetdb 5.1.3 Puppet Puppetdb 5.1.4 Puppet Puppetdb 5.1.5 Puppet Puppetdb 5.1.6 Puppet Puppetdb 5.2.0 Puppet Puppetdb 5.2.1 Puppet Puppetdb 5.2.2 Puppet Puppetdb 5.2.3 Puppet Puppetdb 5.2.4 Puppet Puppetdb 5.2.5 Puppet Puppetdb 5.2.6 Puppet Puppetdb 5.2.7 Puppet Puppetdb 5.2.8 Puppet Puppetdb 5.2.9 Puppet Puppetdb 5.2.10 Puppet Puppetdb 5.2.11 Puppet Puppetdb 5.2.12 Puppet Puppetdb 5.2.13 Puppet Puppetdb 6.0.0 Puppet Puppetdb 6.0.1 Puppet Puppetdb 6.0.2 Puppet Puppetdb 6.0.3 Puppet Puppetdb 6.0.4 Puppet Puppetdb 6.1.0 Puppet Puppetdb 6.2.0 Puppet Puppetdb 6.3.0 Puppet Puppetdb 6.3.1 Puppet Puppetdb 6.3.2 Puppet Puppetdb 6.3.3 Puppet Puppetdb 6.3.4 Puppet Puppetdb 6.3.5 Puppet Puppetdb 6.3.6 Puppet Puppetdb 6.3.7 Puppet Puppetdb 6.4.0 Puppet Puppetdb 6.5.0 Puppet Puppetdb 6.6.0 Puppet Puppetdb 6.7.0 Puppet Puppetdb 6.7.1 Puppet Puppetdb 6.7.2 Puppet Puppetdb 6.7.3 Puppet Puppetdb 6.8.0 Puppet Puppetdb 6.8.1 Puppet Puppetdb 6.9.0 Puppet Puppetdb 6.9.1 Puppet Puppetdb 6.10.0 Puppet Puppet Enterprise 2019.0 Puppet Puppet Enterprise 2019.0.0 Puppet Puppet Enterprise 2019.0.1 Puppet Puppet Enterprise 2019.0.2 Puppet Puppet Enterprise 2019.0.3 Puppet Puppet Enterprise 2019.0.4 Puppet Puppet Enterprise 2019.1.0 Puppet Puppet Enterprise 2019.1.1 Puppet Puppet Enterprise 2019.1.3 Puppet Puppet Enterprise 2019.2.0 Puppet Puppet Enterprise 2019.2.1 Puppet Puppet Enterprise 2019.2.2 Puppet Puppet Enterprise 2019.4.0 Puppet Puppet Enterprise 2019.5.0 Puppet Puppet Enterprise 2018.1.0 Puppet Puppet Enterprise 2018.1.1 Puppet Puppet Enterprise 2018.1.2 Puppet Puppet Enterprise 2018.1.3 Puppet Puppet Enterprise 2018.1.4 Puppet Puppet Enterprise 2018.1.5 Puppet Puppet Enterprise 2018.1.7 Puppet Puppet Enterprise 2018.1.8 Puppet Puppet Enterprise 2018.1.9 Puppet Puppet Enterprise 2018.1.11 Puppet Puppet Enterprise 2018.1.13	258

Nessus

NASL family	FreeBSD Local Security Checks
NASL id	FREEBSD_PKG_36DEF7BA6D2B11EAB115643150D3111D.NASL
description	Puppetlabs reports : Puppet Server and PuppetDB provide useful performance and debugging information via their metrics API endpoints. For PuppetDB this may contain things like hostnames. Puppet Server reports resource names and titles for defined types (which may contain sensitive information) as well as function names and class names. Previously, these endpoints were open to the local network. PE 2018.1.13 & 2019.4.0, Puppet Server 6.9.1 & 5.3.12, and PuppetDB 6.9.1 & 5.2.13 disable trapperkeeper-metrics /v1 metrics API and only allows /v2 access on localhost by default.
last seen	2020-03-26
modified	2020-03-24
plugin id	134843
published	2020-03-24
reporter	This script is Copyright (C) 2020 and is owned by Tenable, Inc. or an Affiliate thereof.
source	https://www.tenable.com/plugins/nessus/134843
title	FreeBSD : puppetserver and puppetdb -- Puppet Server and PuppetDB may leak sensitive information via metrics API (36def7ba-6d2b-11ea-b115-643150d3111d)

References

https://puppet.com/security/cve/CVE-2020-7943/