CVE-2020-7945

5.5 mediumEPSS 0.3%

Local registry credentials were included directly in the CD4PE deployment definition, which could expose these credentials to users who should not have access to them. This is resolved in Continuous Delivery for Puppet Enterprise 4.0.1.

Severity

CVSS 3.1

5.5 medium

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 23% of CVEs (scores of 2026-10-31)
CWE: CWE-522
Published: 2020-09-18
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

puppet:continuous_delivery

References

https://puppet.com/security/cve/CVE-2020-7945
https://puppet.com/security/cve/CVE-2020-7945

Check your stack JSON