Vulnerabilities > CVE-2021-27024 - Unspecified vulnerability in Puppet Continuous Delivery 4.0.0/4.0.1
Attack vector
NETWORK Attack complexity
LOW Privileges required
SINGLE Confidentiality impact
PARTIAL Integrity impact
PARTIAL Availability impact
NONE Summary
A flaw was discovered in Continuous Delivery for Puppet Enterprise (CD4PE) that results in a user with lower privileges being able to access a Puppet Enterprise API token. This issue is resolved in CD4PE 4.10.0
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 2 |