Vulnerabilities > CVE-2023-2530 - Unspecified vulnerability in Puppet Enterprise 2021.7.1/2023.0/2023.1.0

047910
CVSS 9.8 - CRITICAL
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
HIGH
Integrity impact
HIGH
Availability impact
HIGH
network
low complexity
puppet
critical

Summary

A privilege escalation allowing remote code execution was discovered in the orchestration service.