CVE-2020-7943

mediumpriority · track · 33OT risk · elevatedEPSS 0.077 · 95 %ileEUUS

grimoire priorityP3 · Track

Exploitable?

—

no known exploitation

Likely / severe?

7.67% (95th) EPSS

CVSS 5 · medium

Is it mine?

15 products

Check your exposure

Who says so?

3 sources

cnnvd · enisa_euvd · nvd

EPSS · scored 2026-10-23

Puppet Server and PuppetDB provide useful performance and debugging information via their metrics API endpoints. For PuppetDB this may contain things like hostnames. Puppet Server reports resource names and titles for defined types (which may contain sensitive information) as well as function names and class names. Previously, these endpoints were open to the local network. PE 2018.1.13 & 2019.5.0, Puppet Server 6.9.2 & 5.3.12, and PuppetDB 6.9.1 & 5.2.13 disable trapperkeeper-metrics /v1 metrics API and only allows /v2 access on localhost by default. This affects software versions: Puppet Enterprise 2018.1.x stream prior to 2018.1.13 Puppet Enterprise prior to 2019.5.0 Puppet Server prior to 6.9.2 Puppet Server prior to 5.3.12 PuppetDB prior to 6.9.1 PuppetDB prior to 5.2.13 Resolved in: Puppet Enterprise 2018.1.13 Puppet Enterprise 2019.5.0 Puppet Server 6.9.2 Puppet Server 5.3.12 PuppetDB 6.9.1 PuppetDB 5.2.13

cvss

Technical severity, 0–10. One row per scoring source.

7.5

010

base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · medium–high · 5–7.5

v2.05mediumAV:N/AC:L/Au:N/C:P/I:N/A:Nprimary · NVD / NIST USexploitability 10 · impact 2.9

v3.17.5highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:Nprimary · NVD / NIST USexploitability 3.9 · impact 3.6

v3.17.3highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:Fsecondary · CVSS-BT (t0sche)

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-276US

affected products (15)

Products and version ranges known to be affected.

n/a Puppet Enterprise≤ prior to 2019.5.0enisa_euvdEU
n/a Puppet Enterprise 2018.1.x stream≤ prior to 2018.1.13enisa_euvdEU
n/a Puppet server≤ prior to 5.3.12enisa_euvdEU
n/a Puppet server≤ prior to 6.9.2enisa_euvdEU
n/a PuppetDB≤ prior to 6.9.1enisa_euvdEU
n/a PuppetDB≤ prior to 5.2.13enisa_euvdEU
n/a Resolved in Puppet Enterprise, Puppet Server, PuppetDB≤ PuppetDB 6.9.1 and 5.2.13enisa_euvdEU
n/a Resolved in Puppet Enterprise, Puppet Server, PuppetDB≤ Puppet Enterprise 2018.1.13 and 2019.5.0enisa_euvdEU
n/a Resolved in Puppet Enterprise, Puppet Server, PuppetDB≤ Puppet Server 6.9.2 and 5.3.12enisa_euvdEU
puppet puppet enterprise2018.1.0 → 2018.1.15nvdUScpe:2.3:a:puppet:puppet_enterprise:*:*:*:*:*:*:*:*
puppet puppet enterprise2019.0 → 2019.7.0nvdUScpe:2.3:a:puppet:puppet_enterprise:*:*:*:*:*:*:*:*
puppet puppet server< 5.3.13nvdUScpe:2.3:a:puppet:puppet_server:*:*:*:*:*:*:*:*
puppet puppet server6.0.0 → 6.11.1nvdUScpe:2.3:a:puppet:puppet_server:*:*:*:*:*:*:*:*
puppet puppetdb< 5.2.15nvdUScpe:2.3:a:puppet:puppetdb:*:*:*:*:*:*:*:*
puppet puppetdb6.0.0 → 6.10.1nvdUScpe:2.3:a:puppet:puppetdb:*:*:*:*:*:*:*:*

also known as (3)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd nvd NVD CVE.org MITRE

published 2020-03-11modified 2026-06-17

references (7)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan