Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
redhatcveRedhat.comRH:CVE-2021-27021
HistoryJun 25, 2021 - 6:33 p.m.

CVE-2021-27021

2021-06-2518:33:13
redhat.com
access.redhat.com
55
puppet
sql query
privilege escalation
system availability
integrity

CVSS2

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

0.001

Percentile

42.8%

JSON

A flaw was discovered in puppet. An escalation of privileges which allows the user to delete tables via an SQL query is possible in Puppet DB. The highest threat from this vulnerability is to system availability and integrity.

Related

nvd 1
rosalinux 2
ubuntucve 1
cve 1
nessus 2
prion 1
archlinux 1
debiancve 1
osv 1
freebsd 1
cvelist 1
veracode 1
nvd
nvd
CVE-2021-27021
2021-07-20 11:15:11
rosalinux
rosalinux
Advisory ROSA-SA-2024-2329
2024-01-23 12:29:58
Advisory ROSA-SA-2023-2297
2023-11-21 12:46:58
ubuntucve
ubuntucve
CVE-2021-27021
2021-07-20 00:00:00
cve
cve
CVE-2021-27021
2021-07-20 11:15:11
nessus
nessus
Puppet Enterprise < 2019.8.7 / 2021.x < 2021.2 SQLi
2023-11-01 00:00:00
FreeBSD : PuppetDB -- SQL Injection (41bc849f-d5ef-11eb-ae37-589cfc007716)
2021-06-29 00:00:00
prion
prion
Design/Logic Flaw
2021-07-20 11:15:00
archlinux
archlinux
[ASA-202107-8] puppet: privilege escalation
2021-07-01 00:00:00
debiancve
debiancve
CVE-2021-27021
2021-07-20 11:15:11
osv
osv
CVE-2021-27021
2021-07-20 11:15:00
freebsd
freebsd
PuppetDB -- SQL Injection
2021-06-24 00:00:00
cvelist
cvelist
CVE-2021-27021
2021-07-20 10:44:49
veracode
veracode
Privilege Escalation
2022-12-10 04:35:45

CVSS2

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

0.001

Percentile

42.8%

JSON
Related for RH:CVE-2021-27021
nvd1rosalinux2ubuntucve1cve1nessus2prion1archlinux1debiancve1osv1freebsd1cvelist1veracode1