CVE:CVE-2021-27026
CNNVD:CNNVD-202111-972
Puppet Server是美国Puppet实验室的一款用于将配置从主服务器推送到其他服务器的软件。
Puppet Server 存在日志信息泄露漏洞，该漏洞源于软件当成可能记录了一些敏感计划参数。
solution:Upgrade puppet puppet to a higher version than 2021.4.0,and avoid the version [2021.0.0,2021.4.0); Upgrade puppet puppet_connect to a higher version than 0.4.0,and avoid the version (,0.4.0); Upgrade puppet puppet_enterprise to a higher version than 2019.8.9,and avoid the version (,2019.8.9)