{"containers": {"cna": {"affected": [{"product": "Puppet Enterprise, Puppet Agent", "vendor": "n/a", "versions": [{"status": "affected", "version": "- Puppet Enterprise prior to 2019.8.9, Puppet Enterprise prior to 2021.4.0, Puppet Agent prior to 6.25.1, Puppet Agent prior to 7.12.1, Puppet Agent 5.5.x"}]}], "descriptions": [{"lang": "en", "value": "A flaw was discovered in Puppet Agent where the agent may silently ignore Augeas settings or may be vulnerable to a Denial of Service condition prior to the first 'pluginsync'."}], "problemTypes": [{"descriptions": [{"description": "Silent Configuration Failure", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2021-11-28T02:06:18", "orgId": "ca2a266c-be2f-4d4b-92d0-47b76b1a9c4e", "shortName": "puppet"}, "references": [{"tags": ["x_refsource_MISC"], "url": "https://puppet.com/security/cve/cve-2021-27025"}, {"name": "FEDORA-2021-1c0e788093", "tags": ["vendor-advisory", "x_refsource_FEDORA"], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/62SELE7EKVKZL4GABFMVYMIIUZ7FPEF7/"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "security@puppet.com", "ID": "CVE-2021-27025", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "Puppet Enterprise, Puppet Agent", "version": {"version_data": [{"version_value": "- Puppet Enterprise prior to 2019.8.9, Puppet Enterprise prior to 2021.4.0, Puppet Agent prior to 6.25.1, Puppet Agent prior to 7.12.1, Puppet Agent 5.5.x"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "A flaw was discovered in Puppet Agent where the agent may silently ignore Augeas settings or may be vulnerable to a Denial of Service condition prior to the first 'pluginsync'."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "Silent Configuration Failure"}]}]}, "references": {"reference_data": [{"name": "https://puppet.com/security/cve/cve-2021-27025", "refsource": "MISC", "url": "https://puppet.com/security/cve/cve-2021-27025"}, {"name": "FEDORA-2021-1c0e788093", "refsource": "FEDORA", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/62SELE7EKVKZL4GABFMVYMIIUZ7FPEF7/"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-03T20:40:47.252Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://puppet.com/security/cve/cve-2021-27025"}, {"name": "FEDORA-2021-1c0e788093", "tags": ["vendor-advisory", "x_refsource_FEDORA", "x_transferred"], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/62SELE7EKVKZL4GABFMVYMIIUZ7FPEF7/"}]}]}, "cveMetadata": {"assignerOrgId": "ca2a266c-be2f-4d4b-92d0-47b76b1a9c4e", "assignerShortName": "puppet", "cveId": "CVE-2021-27025", "datePublished": "2021-11-18T14:30:36", "dateReserved": "2021-02-09T00:00:00", "dateUpdated": "2024-08-03T20:40:47.252Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:puppet:puppet:*:*:*:*:enterprise:*:*:*", "matchCriteriaId": "24089512-FFBB-4139-886F-571238403529", "versionEndExcluding": "2021.4.0", "versionStartIncluding": "2021.0.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:puppet:puppet_agent:*:*:*:*:*:*:*:*", "matchCriteriaId": "11269DE9-2406-4EFE-ACFE-5C3FE16562C8", "versionEndExcluding": "6.25.1", "vulnerable": true}, {"criteria": "cpe:2.3:a:puppet:puppet_agent:*:*:*:*:*:*:*:*", "matchCriteriaId": "D926D2F2-E61A-4789-AD31-17EEFD30D1FD", "versionEndIncluding": "5.5.22", "versionStartIncluding": "5.5.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:puppet:puppet_agent:*:*:*:*:*:*:*:*", "matchCriteriaId": "BBD44AF4-043F-48E1-899B-CABD5B7411D3", "versionEndExcluding": "7.12.1", "versionStartIncluding": "7.0.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:puppet:puppet_enterprise:*:*:*:*:*:*:*:*", "matchCriteriaId": "35844F76-3BBD-4C76-B24A-1B385AAE1AFC", "versionEndExcluding": "2019.8.9", "vulnerable": true}], "negate": false, "operator": "OR"}]}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:*", "matchCriteriaId": "80E516C0-98A4-4ADE-B69F-66A772E2BAAA", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "A flaw was discovered in Puppet Agent where the agent may silently ignore Augeas settings or may be vulnerable to a Denial of Service condition prior to the first 'pluginsync'."}, {"lang": "es", "value": "Se ha detectado un fallo en Puppet Agent donde el agente puede ignorar silenciosamente la configuraci\u00f3n de Augeas o puede ser vulnerable a una condici\u00f3n de denegaci\u00f3n de servicio antes del primer \"pluginsync\"."}], "id": "CVE-2021-27025", "lastModified": "2024-11-21T05:57:12.137", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "SINGLE", "availabilityImpact": "PARTIAL", "baseScore": 4.0, "confidentialityImpact": "NONE", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:S/C:N/I:N/A:P", "version": "2.0"}, "exploitabilityScore": 8.0, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2021-11-18T15:15:09.503", "references": [{"source": "security@puppet.com", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/62SELE7EKVKZL4GABFMVYMIIUZ7FPEF7/"}, {"source": "security@puppet.com", "tags": ["Vendor Advisory"], "url": "https://puppet.com/security/cve/cve-2021-27025"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/62SELE7EKVKZL4GABFMVYMIIUZ7FPEF7/"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "https://puppet.com/security/cve/cve-2021-27025"}], "sourceIdentifier": "security@puppet.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-noinfo"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{"affected_release": [{"advisory": "RHSA-2022:8862", "cpe": "cpe:/a:redhat:openstack:16.1::el8", "package": "puppet-0:5.5.10-14.el8ost", "product_name": "Red Hat OpenStack Platform 16.1", "release_date": "2022-12-07T00:00:00Z"}, {"advisory": "RHSA-2022:8846", "cpe": "cpe:/a:redhat:openstack:16.2::el8", "package": "puppet-0:5.5.10-14.el8ost", "product_name": "Red Hat OpenStack Platform 16.2", "release_date": "2022-12-07T00:00:00Z"}, {"advisory": "RHSA-2022:1708", "cpe": "cpe:/a:redhat:satellite:6.10::el7", "package": "puppet-agent-0:6.26.0-1.el7sat", "product_name": "Red Hat Satellite 6.10 for RHEL 7", "release_date": "2022-05-04T00:00:00Z"}, {"advisory": "RHSA-2022:1708", "cpe": "cpe:/a:redhat:satellite:6.10::el7", "package": "puppetserver-0:6.18.0-1.el7sat", "product_name": "Red Hat Satellite 6.10 for RHEL 7", "release_date": "2022-05-04T00:00:00Z"}, {"advisory": "RHSA-2022:1708", "cpe": "cpe:/a:redhat:satellite_capsule:6.10::el7", "package": "puppet-agent-0:6.26.0-1.el7sat", "product_name": "Red Hat Satellite 6.10 for RHEL 7", "release_date": "2022-05-04T00:00:00Z"}, {"advisory": "RHSA-2022:1708", "cpe": "cpe:/a:redhat:satellite_capsule:6.10::el7", "package": "puppetserver-0:6.18.0-1.el7sat", "product_name": "Red Hat Satellite 6.10 for RHEL 7", "release_date": "2022-05-04T00:00:00Z"}, {"advisory": "RHSA-2022:4866", "cpe": "cpe:/a:redhat:rhel_satellite_tools:6.10::el6", "package": "puppet-agent-0:6.26.0-1.el6sat", "product_name": "Satellite Tools 6.10 for RHEL 6.ELS", "release_date": "2022-06-01T00:00:00Z"}, {"advisory": "RHSA-2022:4866", "cpe": "cpe:/a:redhat:rhel_satellite_tools:6.10::el7", "package": "puppet-agent-0:6.26.0-1.el7sat", "product_name": "Satellite Tools 6.10 for RHEL 7", "release_date": "2022-06-01T00:00:00Z"}, {"advisory": "RHSA-2022:4866", "cpe": "cpe:/a:redhat:rhel_satellite_tools:6.10::el7", "package": "puppet-agent-0:6.26.0-1.el7sat", "product_name": "Satellite Tools 6.10 for RHEL 7.2.AUS", "release_date": "2022-06-01T00:00:00Z"}, {"advisory": "RHSA-2022:4866", "cpe": "cpe:/a:redhat:rhel_satellite_tools:6.10::el7", "package": "puppet-agent-0:6.26.0-1.el7sat", "product_name": "Satellite Tools 6.10 for RHEL 7.3.AUS", "release_date": "2022-06-01T00:00:00Z"}, {"advisory": "RHSA-2022:4866", "cpe": "cpe:/a:redhat:rhel_satellite_tools:6.10::el7", "package": "puppet-agent-0:6.26.0-1.el7sat", "product_name": "Satellite Tools 6.10 for RHEL 7.4.AUS", "release_date": "2022-06-01T00:00:00Z"}, {"advisory": "RHSA-2022:4866", "cpe": "cpe:/a:redhat:rhel_satellite_tools:6.10::el7", "package": "puppet-agent-0:6.26.0-1.el7sat", "product_name": "Satellite Tools 6.10 for RHEL 7.4.E4S", "release_date": "2022-06-01T00:00:00Z"}, {"advisory": "RHSA-2022:4866", "cpe": "cpe:/a:redhat:rhel_satellite_tools:6.10::el7", "package": "puppet-agent-0:6.26.0-1.el7sat", "product_name": "Satellite Tools 6.10 for RHEL 7.4.TUS", "release_date": "2022-06-01T00:00:00Z"}, {"advisory": "RHSA-2022:4866", "cpe": "cpe:/a:redhat:rhel_satellite_tools:6.10::el7", "package": "puppet-agent-0:6.26.0-1.el7sat", "product_name": "Satellite Tools 6.10 for RHEL 7.6.AUS", "release_date": "2022-06-01T00:00:00Z"}, {"advisory": "RHSA-2022:4866", "cpe": "cpe:/a:redhat:rhel_satellite_tools:6.10::el7", "package": "puppet-agent-0:6.26.0-1.el7sat", "product_name": "Satellite Tools 6.10 for RHEL 7.6.E4S", "release_date": "2022-06-01T00:00:00Z"}, {"advisory": "RHSA-2022:4866", "cpe": "cpe:/a:redhat:rhel_satellite_tools:6.10::el7", "package": "puppet-agent-0:6.26.0-1.el7sat", "product_name": "Satellite Tools 6.10 for RHEL 7.6.TUS", "release_date": "2022-06-01T00:00:00Z"}, {"advisory": "RHSA-2022:4866", "cpe": "cpe:/a:redhat:rhel_satellite_tools:6.10::el7", "package": "puppet-agent-0:6.26.0-1.el7sat", "product_name": "Satellite Tools 6.10 for RHEL 7.7.AUS", "release_date": "2022-06-01T00:00:00Z"}, {"advisory": "RHSA-2022:4866", "cpe": "cpe:/a:redhat:rhel_satellite_tools:6.10::el7", "package": "puppet-agent-0:6.26.0-1.el7sat", "product_name": "Satellite Tools 6.10 for RHEL 7.7.E4S", "release_date": "2022-06-01T00:00:00Z"}, {"advisory": "RHSA-2022:4866", "cpe": "cpe:/a:redhat:rhel_satellite_tools:6.10::el7", "package": "puppet-agent-0:6.26.0-1.el7sat", "product_name": "Satellite Tools 6.10 for RHEL 7.7.TUS", "release_date": "2022-06-01T00:00:00Z"}, {"advisory": "RHSA-2022:4866", "cpe": "cpe:/a:redhat:rhel_satellite_tools:6.10::el8", "package": "puppet-agent-0:6.26.0-1.el8sat", "product_name": "Satellite Tools 6.10 for RHEL 8", "release_date": "2022-06-01T00:00:00Z"}, {"advisory": "RHSA-2022:4866", "cpe": "cpe:/a:redhat:rhel_satellite_tools:6.10::el8", "package": "puppet-agent-0:6.26.0-1.el8sat", "product_name": "Satellite Tools 6.10 for RHEL 8.1.E4S", "release_date": "2022-06-01T00:00:00Z"}, {"advisory": "RHSA-2022:4866", "cpe": "cpe:/a:redhat:rhel_satellite_tools:6.10::el8", "package": "puppet-agent-0:6.26.0-1.el8sat", "product_name": "Satellite Tools 6.10 for RHEL 8.1.EUS", "release_date": "2022-06-01T00:00:00Z"}, {"advisory": "RHSA-2022:4866", "cpe": "cpe:/a:redhat:rhel_satellite_tools:6.10::el8", "package": "puppet-agent-0:6.26.0-1.el8sat", "product_name": "Satellite Tools 6.10 for RHEL 8.2.AUS", "release_date": "2022-06-01T00:00:00Z"}, {"advisory": "RHSA-2022:4866", "cpe": "cpe:/a:redhat:rhel_satellite_tools:6.10::el8", "package": "puppet-agent-0:6.26.0-1.el8sat", "product_name": "Satellite Tools 6.10 for RHEL 8.2.E4S", "release_date": "2022-06-01T00:00:00Z"}, {"advisory": "RHSA-2022:4866", "cpe": "cpe:/a:redhat:rhel_satellite_tools:6.10::el8", "package": "puppet-agent-0:6.26.0-1.el8sat", "product_name": "Satellite Tools 6.10 for RHEL 8.2.EUS", "release_date": "2022-06-01T00:00:00Z"}, {"advisory": "RHSA-2022:4866", "cpe": "cpe:/a:redhat:rhel_satellite_tools:6.10::el8", "package": "puppet-agent-0:6.26.0-1.el8sat", "product_name": "Satellite Tools 6.10 for RHEL 8.2.TUS", "release_date": "2022-06-01T00:00:00Z"}, {"advisory": "RHSA-2022:4866", "cpe": "cpe:/a:redhat:rhel_satellite_tools:6.10::el8", "package": "puppet-agent-0:6.26.0-1.el8sat", "product_name": "Satellite Tools 6.10 for RHEL 8.4.AUS", "release_date": "2022-06-01T00:00:00Z"}, {"advisory": "RHSA-2022:4866", "cpe": "cpe:/a:redhat:rhel_satellite_tools:6.10::el8", "package": "puppet-agent-0:6.26.0-1.el8sat", "product_name": "Satellite Tools 6.10 for RHEL 8.4.E4S", "release_date": "2022-06-01T00:00:00Z"}, {"advisory": "RHSA-2022:4866", "cpe": "cpe:/a:redhat:rhel_satellite_tools:6.10::el8", "package": "puppet-agent-0:6.26.0-1.el8sat", "product_name": "Satellite Tools 6.10 for RHEL 8.4.EUS", "release_date": "2022-06-01T00:00:00Z"}, {"advisory": "RHSA-2022:4866", "cpe": "cpe:/a:redhat:rhel_satellite_tools:6.10::el8", "package": "puppet-agent-0:6.26.0-1.el8sat", "product_name": "Satellite Tools 6.10 for RHEL 8.4.TUS", "release_date": "2022-06-01T00:00:00Z"}, {"advisory": "RHSA-2022:4866", "cpe": "cpe:/a:redhat:rhel_satellite_tools:6.10::el8", "package": "puppet-agent-0:6.26.0-1.el8sat", "product_name": "Satellite Tools 6.10 for RHEL 8.6.AUS", "release_date": "2022-06-01T00:00:00Z"}, {"advisory": "RHSA-2022:4866", "cpe": "cpe:/a:redhat:rhel_satellite_tools:6.10::el8", "package": "puppet-agent-0:6.26.0-1.el8sat", "product_name": "Satellite Tools 6.10 for RHEL 8.6.E4S", "release_date": "2022-06-01T00:00:00Z"}, {"advisory": "RHSA-2022:4866", "cpe": "cpe:/a:redhat:rhel_satellite_tools:6.10::el8", "package": "puppet-agent-0:6.26.0-1.el8sat", "product_name": "Satellite Tools 6.10 for RHEL 8.6.EUS", "release_date": "2022-06-01T00:00:00Z"}, {"advisory": "RHSA-2022:4867", "cpe": "cpe:/a:redhat:rhel_satellite_tools:6.9::el6", "package": "puppet-agent-0:6.26.0-1.el6sat", "product_name": "Satellite Tools 6.9 for RHEL 6.ELS", "release_date": "2022-06-01T00:00:00Z"}, {"advisory": "RHSA-2022:4867", "cpe": "cpe:/a:redhat:rhel_satellite_tools:6.9::el7", "package": "puppet-agent-0:6.26.0-1.el7sat", "product_name": "Satellite Tools 6.9 for RHEL 7", "release_date": "2022-06-01T00:00:00Z"}, {"advisory": "RHSA-2022:4867", "cpe": "cpe:/a:redhat:rhel_satellite_tools:6.9::el7", "package": "puppet-agent-0:6.26.0-1.el7sat", "product_name": "Satellite Tools 6.9 for RHEL 7.2.AUS", "release_date": "2022-06-01T00:00:00Z"}, {"advisory": "RHSA-2022:4867", "cpe": "cpe:/a:redhat:rhel_satellite_tools:6.9::el7", "package": "puppet-agent-0:6.26.0-1.el7sat", "product_name": "Satellite Tools 6.9 for RHEL 7.3.AUS", "release_date": "2022-06-01T00:00:00Z"}, {"advisory": "RHSA-2022:4867", "cpe": "cpe:/a:redhat:rhel_satellite_tools:6.9::el7", "package": "puppet-agent-0:6.26.0-1.el7sat", "product_name": "Satellite Tools 6.9 for RHEL 7.4.AUS", "release_date": "2022-06-01T00:00:00Z"}, {"advisory": "RHSA-2022:4867", "cpe": "cpe:/a:redhat:rhel_satellite_tools:6.9::el7", "package": "puppet-agent-0:6.26.0-1.el7sat", "product_name": "Satellite Tools 6.9 for RHEL 7.4.E4S", "release_date": "2022-06-01T00:00:00Z"}, {"advisory": "RHSA-2022:4867", "cpe": "cpe:/a:redhat:rhel_satellite_tools:6.9::el7", "package": "puppet-agent-0:6.26.0-1.el7sat", "product_name": "Satellite Tools 6.9 for RHEL 7.4.TUS", "release_date": "2022-06-01T00:00:00Z"}, {"advisory": "RHSA-2022:4867", "cpe": "cpe:/a:redhat:rhel_satellite_tools:6.9::el7", "package": "puppet-agent-0:6.26.0-1.el7sat", "product_name": "Satellite Tools 6.9 for RHEL 7.6.AUS", "release_date": "2022-06-01T00:00:00Z"}, {"advisory": "RHSA-2022:4867", "cpe": "cpe:/a:redhat:rhel_satellite_tools:6.9::el7", "package": "puppet-agent-0:6.26.0-1.el7sat", "product_name": "Satellite Tools 6.9 for RHEL 7.6.E4S", "release_date": "2022-06-01T00:00:00Z"}, {"advisory": "RHSA-2022:4867", "cpe": "cpe:/a:redhat:rhel_satellite_tools:6.9::el7", "package": "puppet-agent-0:6.26.0-1.el7sat", "product_name": "Satellite Tools 6.9 for RHEL 7.6.EUS", "release_date": "2022-06-01T00:00:00Z"}, {"advisory": "RHSA-2022:4867", "cpe": "cpe:/a:redhat:rhel_satellite_tools:6.9::el7", "package": "puppet-agent-0:6.26.0-1.el7sat", "product_name": "Satellite Tools 6.9 for RHEL 7.6.TUS", "release_date": "2022-06-01T00:00:00Z"}, {"advisory": "RHSA-2022:4867", "cpe": "cpe:/a:redhat:rhel_satellite_tools:6.9::el7", "package": "puppet-agent-0:6.26.0-1.el7sat", "product_name": "Satellite Tools 6.9 for RHEL 7.7.AUS", "release_date": "2022-06-01T00:00:00Z"}, {"advisory": "RHSA-2022:4867", "cpe": "cpe:/a:redhat:rhel_satellite_tools:6.9::el7", "package": "puppet-agent-0:6.26.0-1.el7sat", "product_name": "Satellite Tools 6.9 for RHEL 7.7.E4S", "release_date": "2022-06-01T00:00:00Z"}, {"advisory": "RHSA-2022:4867", "cpe": "cpe:/a:redhat:rhel_satellite_tools:6.9::el7", "package": "puppet-agent-0:6.26.0-1.el7sat", "product_name": "Satellite Tools 6.9 for RHEL 7.7.EUS", "release_date": "2022-06-01T00:00:00Z"}, {"advisory": "RHSA-2022:4867", "cpe": "cpe:/a:redhat:rhel_satellite_tools:6.9::el7", "package": "puppet-agent-0:6.26.0-1.el7sat", "product_name": "Satellite Tools 6.9 for RHEL 7.7.TUS", "release_date": "2022-06-01T00:00:00Z"}, {"advisory": "RHSA-2022:4867", "cpe": "cpe:/a:redhat:rhel_satellite_tools:6.9::el8", "package": "puppet-agent-0:6.26.0-1.el8sat", "product_name": "Satellite Tools 6.9 for RHEL 8", "release_date": "2022-06-01T00:00:00Z"}, {"advisory": "RHSA-2022:4867", "cpe": "cpe:/a:redhat:rhel_satellite_tools:6.9::el8", "package": "puppet-agent-0:6.26.0-1.el8sat", "product_name": "Satellite Tools 6.9 for RHEL 8.1.E4S", "release_date": "2022-06-01T00:00:00Z"}, {"advisory": "RHSA-2022:4867", "cpe": "cpe:/a:redhat:rhel_satellite_tools:6.9::el8", "package": "puppet-agent-0:6.26.0-1.el8sat", "product_name": "Satellite Tools 6.9 for RHEL 8.1.EUS", "release_date": "2022-06-01T00:00:00Z"}, {"advisory": "RHSA-2022:4867", "cpe": "cpe:/a:redhat:rhel_satellite_tools:6.9::el8", "package": "puppet-agent-0:6.26.0-1.el8sat", "product_name": "Satellite Tools 6.9 for RHEL 8.2.AUS", "release_date": "2022-06-01T00:00:00Z"}, {"advisory": "RHSA-2022:4867", "cpe": "cpe:/a:redhat:rhel_satellite_tools:6.9::el8", "package": "puppet-agent-0:6.26.0-1.el8sat", "product_name": "Satellite Tools 6.9 for RHEL 8.2.E4S", "release_date": "2022-06-01T00:00:00Z"}, {"advisory": "RHSA-2022:4867", "cpe": "cpe:/a:redhat:rhel_satellite_tools:6.9::el8", "package": "puppet-agent-0:6.26.0-1.el8sat", "product_name": "Satellite Tools 6.9 for RHEL 8.2.EUS", "release_date": "2022-06-01T00:00:00Z"}, {"advisory": "RHSA-2022:4867", "cpe": "cpe:/a:redhat:rhel_satellite_tools:6.9::el8", "package": "puppet-agent-0:6.26.0-1.el8sat", "product_name": "Satellite Tools 6.9 for RHEL 8.2.TUS", "release_date": "2022-06-01T00:00:00Z"}, {"advisory": "RHSA-2022:4867", "cpe": "cpe:/a:redhat:rhel_satellite_tools:6.9::el8", "package": "puppet-agent-0:6.26.0-1.el8sat", "product_name": "Satellite Tools 6.9 for RHEL 8.4.AUS", "release_date": "2022-06-01T00:00:00Z"}, {"advisory": "RHSA-2022:4867", "cpe": "cpe:/a:redhat:rhel_satellite_tools:6.9::el8", "package": "puppet-agent-0:6.26.0-1.el8sat", "product_name": "Satellite Tools 6.9 for RHEL 8.4.E4S", "release_date": "2022-06-01T00:00:00Z"}, {"advisory": "RHSA-2022:4867", "cpe": "cpe:/a:redhat:rhel_satellite_tools:6.9::el8", "package": "puppet-agent-0:6.26.0-1.el8sat", "product_name": "Satellite Tools 6.9 for RHEL 8.4.EUS", "release_date": "2022-06-01T00:00:00Z"}, {"advisory": "RHSA-2022:4867", "cpe": "cpe:/a:redhat:rhel_satellite_tools:6.9::el8", "package": "puppet-agent-0:6.26.0-1.el8sat", "product_name": "Satellite Tools 6.9 for RHEL 8.6.AUS", "release_date": "2022-06-01T00:00:00Z"}, {"advisory": "RHSA-2022:4867", "cpe": "cpe:/a:redhat:rhel_satellite_tools:6.9::el8", "package": "puppet-agent-0:6.26.0-1.el8sat", "product_name": "Satellite Tools 6.9 for RHEL 8.6.E4S", "release_date": "2022-06-01T00:00:00Z"}, {"advisory": "RHSA-2022:4867", "cpe": "cpe:/a:redhat:rhel_satellite_tools:6.9::el8", "package": "puppet-agent-0:6.26.0-1.el8sat", "product_name": "Satellite Tools 6.9 for RHEL 8.6.EUS", "release_date": "2022-06-01T00:00:00Z"}, {"advisory": "RHSA-2022:4867", "cpe": "cpe:/a:redhat:rhel_satellite_tools:6.9::el8", "package": "puppet-agent-0:6.26.0-1.el8sat", "product_name": "Satellite Tools 6.9 for RHEL 8.6.TUS", "release_date": "2022-06-01T00:00:00Z"}], "bugzilla": {"description": "puppet: silent configuration failure in agent", "id": "2023853", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2023853"}, "csaw": false, "cvss3": {"cvss3_base_score": "6.3", "cvss3_scoring_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", "status": "verified"}, "cwe": "CWE-665", "details": ["A flaw was discovered in Puppet Agent where the agent may silently ignore Augeas settings or may be vulnerable to a Denial of Service condition prior to the first 'pluginsync'.", "A configuration flaw was found in Puppet Agent where the agent silently ignores Augeas settings. This flaw allows a network attacker to cause a denial of service before the first pluginsync. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability."], "mitigation": {"lang": "en:us", "value": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability."}, "name": "CVE-2021-27025", "package_state": [{"cpe": "cpe:/a:redhat:openstack:10", "fix_state": "Out of support scope", "package_name": "puppet", "product_name": "Red Hat OpenStack Platform 10 (Newton)"}, {"cpe": "cpe:/a:redhat:openstack:13", "fix_state": "Out of support scope", "package_name": "puppet", "product_name": "Red Hat OpenStack Platform 13 (Queens)"}, {"cpe": "cpe:/a:redhat:rhui:3", "fix_state": "Will not fix", "package_name": "puppet", "product_name": "Red Hat Update Infrastructure 3 for Cloud Providers"}], "public_date": "2021-11-09T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2021-27025\nhttps://nvd.nist.gov/vuln/detail/CVE-2021-27025\nhttps://puppet.com/docs/pe/2021.4/osp/release_notes_puppet.html#release_notes_puppet\nhttps://puppet.com/security/cve/cve-2021-27025"], "threat_severity": "Moderate", "upstream_fix": "Puppet Agent 6.25.1, Puppet Agent 7.12.1"}