{"id":"CVE-2020-7945","url":"https://www.cyber-defence.io/tools/cve/CVE-2020-7945","generatedAt":"2026-10-27T22:31:20.227Z","title":"Local registry credentials were included directly in the CD4PE deployment definition, which could expose these credentials to users who should not have access to them.","description":"Local registry credentials were included directly in the CD4PE deployment definition, which could expose these credentials to users who should not have access to them. This is resolved in Continuous Delivery for Puppet Enterprise 4.0.1.","published":"2020-09-18T18:15:20.000Z","lastModified":"2026-06-17T03:25:41.000Z","status":"Modified","sourceIdentifier":"security@puppet.com","cvss":{"version":"3.1","score":5.5,"severity":"MEDIUM","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"},"cwe":["CWE-522"],"affected":["puppet/continuous delivery"],"epss":{"score":0.00306,"percentile":0.23203,"date":"2026-10-26","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"low","text":"Lower severity and a low EPSS score (0.31%). Track it; it rarely justifies an emergency change on its own."},"changes":[],"references":[{"url":"https://puppet.com/security/cve/CVE-2020-7945","tags":["Vendor Advisory"],"source":"security@puppet.com"},{"url":"https://puppet.com/security/cve/CVE-2020-7945","tags":["Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2020-7945","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}