CVE-2020-7944

7.7 highEPSS 0.9%

High (7.7) in puppet continuous delivery. EPSS 0.9% chance of exploitation in the next 30 days.

In Continuous Delivery for Puppet Enterprise (CD4PE) before 3.4.0, changes to resources or classes containing Sensitive parameters can result in the Sensitive parameters ending up in the impact analysis report.

Severity

CVSS 3.1

7.7 high

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

EPSS: 0.9% chance of exploitation in the next 30 days; higher than 58% of CVEs (scores of 2026-10-31)
CWE: CWE-200
Published: 2020-03-26
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

puppet:continuous_delivery

References

https://puppet.com/security/cve/CVE-2020-7944
https://puppet.com/security/cve/CVE-2020-7944

Check your stack JSON