CVE-2021-27021

2021-07-2010:44:49

CWE-1027

puppet

www.cve.org

privilege escalation

puppet db

sql query

cve-2021-27021

AI Score

9.2

Confidence

High

EPSS

0.001

Percentile

42.8%

JSON

A flaw was discovered in Puppet DB, this flaw results in an escalation of privileges which allows the user to delete tables via an SQL query.

CNA Affected

[
  {
    "product": "Puppet DB",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "All prior versions before Puppet DB 6.17.0, 7.4.1, Puppet Platform 6.23, 7.8.0 and PE 2021.2, 2019.8.7"
      }
    ]
  }
]