description: A flaw was discovered in Continuous Delivery for Puppet Enterprise (CD4PE) that results in a user with lower privileges being able to access a Puppet Enterprise API token. This issue is resolved in CD4PE 4.10.0
problem types: Invalid Permissions Check
affected:
{
product: Puppet Continuous Delivery for Puppet Enterprise (CD4PE)
vendor: n/a
versions:
status: affected, version: CD4PE prior to 4.10.0
}