description: In Continuous Delivery for Puppet Enterprise (CD4PE) before 3.4.0, changes to resources or classes containing Sensitive parameters can result in the Sensitive parameters ending up in the impact analysis report.
problem types: Insertion of Sensitive Information into Externally-Accessible File or Directory
affected:
{
product: Continuous Delivery for Puppet Enterprise (CD4PE)
vendor: n/a
versions:
status: affected, version: CD4PE prior to 3.4.0
}