[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f4RmP7Js6-f5WFoxNCvzbCsQusiRPUSjTHrnKnY01lgc":3,"g5a-risk:CVE-2020-7945":103},{"success":4,"data":5,"meta":101},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":39,"epssPercentile":27,"epssTimeSeries":40,"severity":41,"affectedProducts":42,"affectedProductsCount":48,"references":49,"referencesCount":48,"weaknesses":55,"weaknessesCount":48,"isActivelyExploited":64,"cisaInfo":27,"otxData":27,"relatedBlogPosts":65,"seoMetadata":66,"configurations":91,"relatedVendorCves":99,"notableEvents":100},"CVE-2020-7945","What is CVE-2020-7945?","Local registry credentials were included directly in the CD4PE deployment definition, which could expose these credentials to users who should not have access to them. This is resolved in Continuous Delivery for Puppet Enterprise 4.0.1.","Local registry credentials were included directly in the CD4PE deployment definition, which could expose these credentials to users who should not have acces...","2020-09-18T18:15:20.287","2020-09-30T19:49:52.973",5.5,"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":27,"CVSSMetricV2":30,"CVSSMetricV40":27},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":22,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":23,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.1","LOCAL","LOW","NONE","UNCHANGED","HIGH","MEDIUM",null,1.8,3.6,[31],{"Source":17,"Type":18,"CVSSData":32,"BaseSeverity":22,"ExploitabilityScore":37,"ImpactScore":38,"ACInsufInfo":27,"ObtainAllPrivilege":27,"ObtainUserPrivilege":27,"ObtainOtherPrivilege":27,"UserInteractionRequired":27},{"Version":33,"VectorString":34,"AccessVector":21,"AccessComplexity":22,"Authentication":23,"ConfidentialityImpact":35,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":36,"BaseSeverity":27,"Exploitability":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"CollateralDamagePotential":27,"TargetDistribution":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"EnvironmentalScore":27},"2.0","AV:L\u002FAC:L\u002FAu:N\u002FC:P\u002FI:N\u002FA:N","PARTIAL",2.1,3.9,2.9,0.00306,[39,39,39,39,39,39,39],"Medium",[43],{"vendor":44,"product":45,"version":46,"criteria":47,"vulnerable":4},"puppet","continuous_delivery","4.0.0","cpe:2.3:a:puppet:continuous_delivery:4.0.0:*:*:*:puppet_enterprise:*:*:*",1,[50],{"url":51,"source":52,"tags":53},"https:\u002F\u002Fpuppet.com\u002Fsecurity\u002Fcve\u002FCVE-2020-7945","Puppet",[54],"Vendor Advisory",[56],{"id":57,"name":58,"description":59,"extendedDescription":60,"status":61,"abstraction":62,"structure":63},"CWE-522","Insufficiently Protected Credentials","The product transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and\u002For retrieval.","","Incomplete","Class","Simple",false,[],{"title":67,"metaDescription":68,"keywords":69,"canonicalUrl":70,"structuredData":71},"What is CVE-2020-7945? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2020-7945, a medium severity cyber security vulnerability from 2020. Local registry credentials were included directly in the C...","CVE-2020-7945, CVE-2020-7945 vulnerability, CVE-2020-7945 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2020, CVSS score, exploit, patch, remediation, puppet security, continuous_delivery vulnerability","\u002Fwhat-is\u002Fcve-2020-7945",{"@context":72,"@type":73,"headline":67,"description":68,"datePublished":10,"dateModified":11,"author":74,"publisher":78,"about":82,"mainEntityOfPage":86,"articleSection":89,"keywords":90},"https:\u002F\u002Fschema.org","TechArticle",{"@type":75,"name":76,"url":77},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":75,"name":76,"url":77,"logo":79},{"@type":80,"url":81},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":83,"name":6,"description":84,"additionalType":85},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":87,"@id":88},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2020-7945","Cybersecurity","CVE-2020-7945, CVE-2020-7945 vulnerability, CVE-2020-7945 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[92],{"Operator":27,"Negate":27,"Nodes":93},[94],{"Operator":95,"Negate":27,"CPEMatch":96},"OR",[97],{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":98,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"5A05DAD5-2B3F-4BD1-B56B-083AAF0876A9",[],[],{"lastModified":11,"cacheTime":102,"version":33},1792257715722,{"score":104,"band":105,"action":106,"scoredAt":107},19,"Info","Track","2026-10-16T06:49:28.840669+00:00"]