Lucene search
Redhat.comRH:CVE-2020-7943HistoryApr 27, 2020 - 8:09 p.m.
CVE-2020-7943
2020-04-2720:09:53
redhat.com
access.redhat.com
8
EPSS
0.104
Percentile
95.0%
A flaw was found where the metrics API endpoints of Puppet Server and PuppetDB leaked sensitive information to the local network. Listening to these network endpoints could allow attackers the ability to exploit additional computer systems. The highest impact of this flaw is confidentiality.
Mitigation
Disable the trapperkeeper-metrics /v1 metrics API
Related
prion
prion
Design/Logic Flaw
2020-03-11 23:15:00
nvd
nvd
CVE-2020-7943
2020-03-11 23:15:11
ubuntucve
ubuntucve
CVE-2020-7943
2020-03-11 00:00:00
nessus
nessus
cvelist
cvelist
CVE-2020-7943
2020-03-11 21:56:41
veracode
veracode
Information Disclosure
2020-10-28 17:49:09
freebsd
freebsd
nuclei
nuclei
Puppet Server/PuppetDB - Sensitive Information Disclosure
2022-03-08 18:47:22
debiancve
debiancve
CVE-2020-7943
2020-03-11 23:15:11
osv
osv
CVE-2020-7943
2020-03-11 23:15:00
cve
cve
CVE-2020-7943
2020-03-11 23:15:11
redhat
redhat
(RHSA-2020:4366) Important: Satellite 6.8 release
2020-10-27 12:45:25