cve.bz

CVE-2021-27025

6.5 mediumEPSS 1.1%

Medium (6.5). EPSS 1.1% chance of exploitation in the next 30 days. Fixed in puppet 6.25.1, 7.12.1.

A flaw was discovered in Puppet Agent where the agent may silently ignore Augeas settings or may be vulnerable to a Denial of Service condition prior to the first 'pluginsync'.

Severity

CVSS 3.1

6.5 medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
EPSS
1.1% chance of exploitation in the next 30 days; higher than 65% of CVEs (scores of 2026-10-31)
Published
Modified
Record from
the NVD, synced

Affected

Packages (OSV)

AdvisoryEcosystemPackageAffectedFixed in
GHSA-q4g7-jrxv-67r9RubyGemspuppet>=7.0.0 <7.12.17.12.1
GHSA-q4g7-jrxv-67r9RubyGemspuppet<6.25.16.25.1

References

Check your stackJSON