Related Vulnerabilities: CVE-2021-27021  

A flaw was discovered in Puppet DB, this flaw results in an escalation of privileges which allows the user to delete tables via an SQL query. This has been resolved in Puppet DB 6.17.0, 7.4.1, Platform 6.23, 7.7.0 and Puppet Enterprise 2021.2, 2019.8.7.

Severity Medium

Remote Yes

Type Privilege escalation

Description

A flaw was discovered in Puppet DB, this flaw results in an escalation of privileges which allows the user to delete tables via an SQL query. This has been resolved in Puppet DB 6.17.0, 7.4.1, Platform 6.23, 7.7.0 and Puppet Enterprise 2021.2, 2019.8.7.

AVG-2106 puppet5 5.5.22-3 Medium Vulnerable

AVG-2105 puppet 6.22.1-1 Medium Vulnerable

https://puppet.com/security/cve/cve-2021-27021/