CVE-2023-5214 MEDIUM

CVE-2023-5214: CVE-2023-5214 - Privilege Escalation in Puppet Bolt

Vendor Puppet

Product Bolt

Weakness CWE-269

Published October 6, 2023

Last update September 19, 2024

CVSS base score

6.5/10

Attack vector Adjacent

Attack complexity High

Privileges required Low

User interaction None

Confidentiality Low

Integrity High

CVSS vector

CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:C/C:L/I:H/A:N

What the vulnerability does

01Description

In Puppet Bolt versions prior to 3.27.4, a path to escalate privileges was identified.

Key dates

October 6, 2023 CVE published

September 19, 2024 Record updated

External resources

Related vulnerabilities