Lucene search
Veracode Vulnerability DatabaseVERACODE:38399HistoryDec 10, 2022 - 4:35 a.m.
Privilege Escalation
2022-12-1004:35:45
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
4
puppetdb
privilege escalation
input query validation
user tables
sql query
EPSS
0.001
Percentile
42.8%
puppetdb is vulnerable to privilege escalation. The vulnerability exists due to the lack of input query validation in the library, allowing an attacker to delete user tables via malicious sql query.
Related
nvd
nvd
CVE-2021-27021
2021-07-20 11:15:11
rosalinux
rosalinux
Advisory ROSA-SA-2024-2329
2024-01-23 12:29:58
Advisory ROSA-SA-2023-2297
2023-11-21 12:46:58
ubuntucve
ubuntucve
CVE-2021-27021
2021-07-20 00:00:00
cve
cve
CVE-2021-27021
2021-07-20 11:15:11
nessus
nessus
Puppet Enterprise < 2019.8.7 / 2021.x < 2021.2 SQLi
2023-11-01 00:00:00
FreeBSD : PuppetDB -- SQL Injection (41bc849f-d5ef-11eb-ae37-589cfc007716)
2021-06-29 00:00:00
prion
prion
Design/Logic Flaw
2021-07-20 11:15:00
archlinux
archlinux
[ASA-202107-8] puppet: privilege escalation
2021-07-01 00:00:00
debiancve
debiancve
CVE-2021-27021
2021-07-20 11:15:11
osv
osv
CVE-2021-27021
2021-07-20 11:15:00
freebsd
freebsd
PuppetDB -- SQL Injection
2021-06-24 00:00:00
redhatcve
redhatcve
CVE-2021-27021
2021-06-25 18:33:13
cvelist
cvelist
CVE-2021-27021
2021-07-20 10:44:49