description: A privilege escalation allowing remote code execution was discovered in the orchestration service.
problem types: CWE-284 Improper Access Control
affected:
{
vendor: Puppet
product: Puppet Enterprise
versions:
version: 2021.7.0, status: affected, lessThan: 2021.7.4, versionType: semver
version: 2023.0.0, status: affected, lessThan: 2023.2.0, versionType: semver
defaultStatus: unaffected
}