Puppet Bolt vulnerabilities

2 vulnerabilities

Known vulnerabilities in Puppet Bolt, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

4.1CVE-2022-2394perforcepuppet_bolt+1
EPSS score
0.54%
Puppet Bolt prior to version 3.24.0 will print sensitive parameters when planning a run resulting in them potentially being logged when run programmatically, such as via Puppet Enterprise.9.8CVE-2023-5214RubyGemsbolt+1
EPSS score
0.45%
In Puppet Bolt versions prior to 3.27.4, a path to escalate privileges was identified.