CVE-2023-5214

In Puppet Bolt versions prior to 3.27.4, a path to escalate privileges was identified.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
6.5 MEDIUM
ADJACENT_NETWORK
HIGH
LOW
CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:C/C:L/I:H/A:N
puppetCNA
6.5 MEDIUM
ADJACENT_NETWORK
HIGH
LOW
CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:C/C:L/I:H/A:N
CVEADP
---
---
CISA-ADPADP
---
---