{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Moderate"
    },
    "category": "csaf_vex",
    "csaf_version": "2.0",
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "title": "silent configuration failure in agent",
    "tracking": {
      "current_release_date": "2026-07-17T13:54:42+00:00",
      "generator": {
        "date": "2026-07-17T13:54:42+00:00",
        "engine": {
          "name": "CSAF Generator",
          "version": "3.1.0"
        }
      },
      "id": "CVE-2021-27025",
      "initial_release_date": "2021-11-09T00:00:00+00:00",
      "revision_history": [
        {
          "date": "2026-07-17T13:54:42+00:00",
          "number": "1",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "category": "vendor",
        "name": "Red Hat",
        "branches": [
          {
            "category": "product_name",
            "name": "Red Hat OpenStack Platform 10.0 (Newton)",
            "product": {
              "name": "Red Hat OpenStack Platform 10.0 (Newton)",
              "product_id": "openstack-10",
              "product_identification_helper": {
                "cpe": "cpe:/a:redhat:openstack:10"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Red Hat OpenStack Platform rhos-13.0.z",
            "product": {
              "name": "Red Hat OpenStack Platform rhos-13.0.z",
              "product_id": "openstack-13",
              "product_identification_helper": {
                "cpe": "cpe:/a:redhat:openstack:13"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Red Hat OpenStack Platform 16.1 (Train)",
            "product": {
              "name": "Red Hat OpenStack Platform 16.1 (Train)",
              "product_id": "openstack-16.1-default",
              "product_identification_helper": {
                "cpe": "cpe:/a:redhat:openstack:16.1"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Red Hat OpenStack Platform 16.1 (Train)",
            "product": {
              "name": "Red Hat OpenStack Platform 16.1 (Train)",
              "product_id": "openstack-16.1-default::el8",
              "product_identification_helper": {
                "cpe": "cpe:/a:redhat:openstack:16.1::el8"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Red Hat OpenStack Platform 16.1 (Train)",
            "product": {
              "name": "Red Hat OpenStack Platform 16.1 (Train)",
              "product_id": "openstack-16.1::el8",
              "product_identification_helper": {
                "cpe": "cpe:/a:redhat:openstack:16.1::el8"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Red Hat OpenStack Platform 16.2 (Train)",
            "product": {
              "name": "Red Hat OpenStack Platform 16.2 (Train)",
              "product_id": "openstack-16.2-default",
              "product_identification_helper": {
                "cpe": "cpe:/a:redhat:openstack:16.2"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Red Hat OpenStack Platform rhos-16.2.z",
            "product": {
              "name": "Red Hat OpenStack Platform rhos-16.2.z",
              "product_id": "openstack-16.2::el8",
              "product_identification_helper": {
                "cpe": "cpe:/a:redhat:openstack:16.2::el8"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Red Hat Satellite",
            "product": {
              "name": "Red Hat Satellite",
              "product_id": "rhn_satellite_6-default",
              "product_identification_helper": {
                "cpe": "cpe:/a:redhat:satellite:6"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Red Hat Satellite 6.10.0",
            "product": {
              "name": "Red Hat Satellite 6.10.0",
              "product_id": "rhn_satellite_6.10::el7",
              "product_identification_helper": {
                "cpe": "cpe:/a:redhat:satellite_capsule:6.10::el7"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Red Hat Update Infrastructure for Cloud Providers 3.0.0",
            "product": {
              "name": "Red Hat Update Infrastructure for Cloud Providers 3.0.0",
              "product_id": "rhui-3.0",
              "product_identification_helper": {
                "cpe": "cpe:/a:redhat:rhui:3"
              }
            }
          },
          {
            "category": "product_version",
            "name": "puppet",
            "product": {
              "name": "puppet",
              "product_id": "puppet",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/puppet"
              }
            }
          },
          {
            "category": "product_version",
            "name": "puppet",
            "product": {
              "name": "puppet",
              "product_id": "puppet-0:5.5.10-14.el8ost",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/puppet@5.5.10-14.el8ost?epoch=0"
              }
            }
          },
          {
            "category": "product_version",
            "name": "puppet",
            "product": {
              "name": "puppet",
              "product_id": "puppet-0:5.5.10-14.el8ost.src",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/puppet@5.5.10-14.el8ost?arch=src&epoch=0"
              }
            }
          },
          {
            "category": "product_version",
            "name": "puppet-agent",
            "product": {
              "name": "puppet-agent",
              "product_id": "puppet-agent-0:6.26.0-1.el7sat",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/puppet-agent@6.26.0-1.el7sat?epoch=0"
              }
            }
          },
          {
            "category": "product_version",
            "name": "puppet-agent",
            "product": {
              "name": "puppet-agent",
              "product_id": "puppet-agent-0:6.26.0-1.el7sat.src",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/puppet-agent@6.26.0-1.el7sat?arch=src&epoch=0"
              }
            }
          },
          {
            "category": "product_version",
            "name": "puppet-headless",
            "product": {
              "name": "puppet-headless",
              "product_id": "puppet-headless",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/puppet-headless"
              }
            }
          },
          {
            "category": "product_version",
            "name": "puppet-headless",
            "product": {
              "name": "puppet-headless",
              "product_id": "puppet-headless-0:5.5.10-14.el8ost",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/puppet-headless@5.5.10-14.el8ost?epoch=0"
              }
            }
          },
          {
            "category": "product_version",
            "name": "puppet-server",
            "product": {
              "name": "puppet-server",
              "product_id": "puppet-server",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/puppet-server"
              }
            }
          },
          {
            "category": "product_version",
            "name": "puppet",
            "product": {
              "name": "puppet",
              "product_id": "puppet.src",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/puppet?arch=src"
              }
            }
          },
          {
            "category": "product_version",
            "name": "puppetserver",
            "product": {
              "name": "puppetserver",
              "product_id": "puppetserver-0:6.18.0-1.el7sat",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/puppetserver@6.18.0-1.el7sat?epoch=0"
              }
            }
          },
          {
            "category": "product_version",
            "name": "puppetserver",
            "product": {
              "name": "puppetserver",
              "product_id": "puppetserver-0:6.18.0-1.el7sat.src",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/puppetserver@6.18.0-1.el7sat?arch=src&epoch=0"
              }
            }
          },
          {
            "category": "product_version",
            "name": "puppetserver",
            "product": {
              "name": "puppetserver",
              "product_id": "puppetserver.src",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/puppetserver?arch=src"
              }
            }
          }
        ]
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "puppet as a component of Red Hat OpenStack Platform rhos-13.0.z",
          "product_id": "openstack-13:puppet"
        },
        "product_reference": "puppet",
        "relates_to_product_reference": "openstack-13"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "puppet as a component of Red Hat Update Infrastructure for Cloud Providers 3.0.0",
          "product_id": "rhui-3.0:puppet"
        },
        "product_reference": "puppet",
        "relates_to_product_reference": "rhui-3.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "puppet as a component of Red Hat OpenStack Platform 16.2 (Train)",
          "product_id": "openstack-16.2-default:puppet"
        },
        "product_reference": "puppet",
        "relates_to_product_reference": "openstack-16.2-default"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "puppet as a component of Red Hat OpenStack Platform 10.0 (Newton)",
          "product_id": "openstack-10:puppet"
        },
        "product_reference": "puppet",
        "relates_to_product_reference": "openstack-10"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "puppet-0:5.5.10-14.el8ost as a component of Red Hat OpenStack Platform 16.1 (Train)",
          "product_id": "openstack-16.1::el8:puppet-0:5.5.10-14.el8ost"
        },
        "product_reference": "puppet-0:5.5.10-14.el8ost",
        "relates_to_product_reference": "openstack-16.1::el8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "puppet-0:5.5.10-14.el8ost as a component of Red Hat OpenStack Platform 16.1 (Train)",
          "product_id": "openstack-16.1-default::el8:puppet-0:5.5.10-14.el8ost"
        },
        "product_reference": "puppet-0:5.5.10-14.el8ost",
        "relates_to_product_reference": "openstack-16.1-default::el8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "puppet-0:5.5.10-14.el8ost as a component of Red Hat OpenStack Platform rhos-16.2.z",
          "product_id": "openstack-16.2::el8:puppet-0:5.5.10-14.el8ost"
        },
        "product_reference": "puppet-0:5.5.10-14.el8ost",
        "relates_to_product_reference": "openstack-16.2::el8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "puppet-0:5.5.10-14.el8ost.src as a component of Red Hat OpenStack Platform rhos-16.2.z",
          "product_id": "openstack-16.2::el8:puppet-0:5.5.10-14.el8ost.src"
        },
        "product_reference": "puppet-0:5.5.10-14.el8ost.src",
        "relates_to_product_reference": "openstack-16.2::el8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "puppet-0:5.5.10-14.el8ost.src as a component of Red Hat OpenStack Platform 16.1 (Train)",
          "product_id": "openstack-16.1-default::el8:puppet-0:5.5.10-14.el8ost.src"
        },
        "product_reference": "puppet-0:5.5.10-14.el8ost.src",
        "relates_to_product_reference": "openstack-16.1-default::el8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "puppet-0:5.5.10-14.el8ost.src as a component of Red Hat OpenStack Platform 16.1 (Train)",
          "product_id": "openstack-16.1::el8:puppet-0:5.5.10-14.el8ost.src"
        },
        "product_reference": "puppet-0:5.5.10-14.el8ost.src",
        "relates_to_product_reference": "openstack-16.1::el8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "puppet-agent-0:6.26.0-1.el7sat as a component of Red Hat Satellite 6.10.0",
          "product_id": "rhn_satellite_6.10::el7:puppet-agent-0:6.26.0-1.el7sat"
        },
        "product_reference": "puppet-agent-0:6.26.0-1.el7sat",
        "relates_to_product_reference": "rhn_satellite_6.10::el7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "puppet-agent-0:6.26.0-1.el7sat.src as a component of Red Hat Satellite 6.10.0",
          "product_id": "rhn_satellite_6.10::el7:puppet-agent-0:6.26.0-1.el7sat.src"
        },
        "product_reference": "puppet-agent-0:6.26.0-1.el7sat.src",
        "relates_to_product_reference": "rhn_satellite_6.10::el7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "puppet-headless as a component of Red Hat OpenStack Platform 16.2 (Train)",
          "product_id": "openstack-16.2-default:puppet-headless"
        },
        "product_reference": "puppet-headless",
        "relates_to_product_reference": "openstack-16.2-default"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "puppet-headless-0:5.5.10-14.el8ost as a component of Red Hat OpenStack Platform 16.1 (Train)",
          "product_id": "openstack-16.1-default::el8:puppet-headless-0:5.5.10-14.el8ost"
        },
        "product_reference": "puppet-headless-0:5.5.10-14.el8ost",
        "relates_to_product_reference": "openstack-16.1-default::el8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "puppet-headless-0:5.5.10-14.el8ost as a component of Red Hat OpenStack Platform rhos-16.2.z",
          "product_id": "openstack-16.2::el8:puppet-headless-0:5.5.10-14.el8ost"
        },
        "product_reference": "puppet-headless-0:5.5.10-14.el8ost",
        "relates_to_product_reference": "openstack-16.2::el8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "puppet-headless-0:5.5.10-14.el8ost as a component of Red Hat OpenStack Platform 16.1 (Train)",
          "product_id": "openstack-16.1::el8:puppet-headless-0:5.5.10-14.el8ost"
        },
        "product_reference": "puppet-headless-0:5.5.10-14.el8ost",
        "relates_to_product_reference": "openstack-16.1::el8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "puppet-server as a component of Red Hat OpenStack Platform rhos-13.0.z",
          "product_id": "openstack-13:puppet-server"
        },
        "product_reference": "puppet-server",
        "relates_to_product_reference": "openstack-13"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "puppet-server as a component of Red Hat OpenStack Platform 16.1 (Train)",
          "product_id": "openstack-16.1-default:puppet-server"
        },
        "product_reference": "puppet-server",
        "relates_to_product_reference": "openstack-16.1-default"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "puppet-server as a component of Red Hat Update Infrastructure for Cloud Providers 3.0.0",
          "product_id": "rhui-3.0:puppet-server"
        },
        "product_reference": "puppet-server",
        "relates_to_product_reference": "rhui-3.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "puppet-server as a component of Red Hat OpenStack Platform 16.2 (Train)",
          "product_id": "openstack-16.2-default:puppet-server"
        },
        "product_reference": "puppet-server",
        "relates_to_product_reference": "openstack-16.2-default"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "puppet-server as a component of Red Hat OpenStack Platform 10.0 (Newton)",
          "product_id": "openstack-10:puppet-server"
        },
        "product_reference": "puppet-server",
        "relates_to_product_reference": "openstack-10"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "puppet.src as a component of Red Hat OpenStack Platform rhos-13.0.z",
          "product_id": "openstack-13:puppet.src"
        },
        "product_reference": "puppet.src",
        "relates_to_product_reference": "openstack-13"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "puppet.src as a component of Red Hat Update Infrastructure for Cloud Providers 3.0.0",
          "product_id": "rhui-3.0:puppet.src"
        },
        "product_reference": "puppet.src",
        "relates_to_product_reference": "rhui-3.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "puppet.src as a component of Red Hat OpenStack Platform 16.2 (Train)",
          "product_id": "openstack-16.2-default:puppet.src"
        },
        "product_reference": "puppet.src",
        "relates_to_product_reference": "openstack-16.2-default"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "puppet.src as a component of Red Hat OpenStack Platform 10.0 (Newton)",
          "product_id": "openstack-10:puppet.src"
        },
        "product_reference": "puppet.src",
        "relates_to_product_reference": "openstack-10"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "puppetserver-0:6.18.0-1.el7sat as a component of Red Hat Satellite 6.10.0",
          "product_id": "rhn_satellite_6.10::el7:puppetserver-0:6.18.0-1.el7sat"
        },
        "product_reference": "puppetserver-0:6.18.0-1.el7sat",
        "relates_to_product_reference": "rhn_satellite_6.10::el7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "puppetserver-0:6.18.0-1.el7sat.src as a component of Red Hat Satellite 6.10.0",
          "product_id": "rhn_satellite_6.10::el7:puppetserver-0:6.18.0-1.el7sat.src"
        },
        "product_reference": "puppetserver-0:6.18.0-1.el7sat.src",
        "relates_to_product_reference": "rhn_satellite_6.10::el7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "puppetserver.src as a component of Red Hat Satellite",
          "product_id": "rhn_satellite_6-default:puppetserver.src"
        },
        "product_reference": "puppetserver.src",
        "relates_to_product_reference": "rhn_satellite_6-default"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2021-27025",
      "cwe": {
        "id": "CWE-665",
        "name": "Improper Initialization"
      },
      "discovery_date": "2021-11-09T00:00:00+00:00",
      "notes": [
        {
          "category": "description",
          "text": "A configuration flaw was found in Puppet Agent where the agent silently ignores Augeas settings. This flaw allows a network attacker to cause a denial of service before the first pluginsync. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.",
          "title": "Vulnerability description"
        }
      ],
      "product_status": {
        "fixed": [
          "openstack-16.1-default::el8:puppet-0:5.5.10-14.el8ost",
          "openstack-16.1-default::el8:puppet-0:5.5.10-14.el8ost.src",
          "openstack-16.1-default::el8:puppet-headless-0:5.5.10-14.el8ost",
          "openstack-16.1::el8:puppet-0:5.5.10-14.el8ost",
          "openstack-16.1::el8:puppet-0:5.5.10-14.el8ost.src",
          "openstack-16.1::el8:puppet-headless-0:5.5.10-14.el8ost",
          "openstack-16.2::el8:puppet-0:5.5.10-14.el8ost",
          "openstack-16.2::el8:puppet-0:5.5.10-14.el8ost.src",
          "openstack-16.2::el8:puppet-headless-0:5.5.10-14.el8ost",
          "rhn_satellite_6.10::el7:puppet-agent-0:6.26.0-1.el7sat",
          "rhn_satellite_6.10::el7:puppet-agent-0:6.26.0-1.el7sat.src",
          "rhn_satellite_6.10::el7:puppetserver-0:6.18.0-1.el7sat",
          "rhn_satellite_6.10::el7:puppetserver-0:6.18.0-1.el7sat.src"
        ],
        "known_affected": [
          "openstack-10:puppet",
          "openstack-10:puppet-server",
          "openstack-10:puppet.src",
          "openstack-13:puppet",
          "openstack-13:puppet-server",
          "openstack-13:puppet.src",
          "openstack-16.1-default:puppet-server",
          "openstack-16.2-default:puppet",
          "openstack-16.2-default:puppet-headless",
          "openstack-16.2-default:puppet-server",
          "openstack-16.2-default:puppet.src",
          "rhn_satellite_6-default:puppetserver.src",
          "rhui-3.0:puppet",
          "rhui-3.0:puppet-server",
          "rhui-3.0:puppet.src"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2021-27025"
        },
        {
          "category": "external",
          "summary": "nvd.nist.gov",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-27025"
        },
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-27025"
        }
      ],
      "remediations": [
        {
          "category": "no_fix_planned",
          "details": "Out of support scope",
          "product_ids": [
            "openstack-10:puppet",
            "openstack-10:puppet-server",
            "openstack-10:puppet.src",
            "openstack-13:puppet",
            "openstack-13:puppet-server",
            "openstack-13:puppet.src"
          ]
        },
        {
          "category": "no_fix_planned",
          "details": "Will not fix",
          "product_ids": [
            "rhui-3.0:puppet",
            "rhui-3.0:puppet-server",
            "rhui-3.0:puppet.src"
          ]
        },
        {
          "category": "none_available",
          "details": "Affected",
          "product_ids": [
            "openstack-16.1-default:puppet-server",
            "openstack-16.2-default:puppet",
            "openstack-16.2-default:puppet-headless",
            "openstack-16.2-default:puppet-server",
            "openstack-16.2-default:puppet.src",
            "rhn_satellite_6-default:puppetserver.src"
          ]
        },
        {
          "category": "vendor_fix",
          "date": "2022-12-07T20:30:26+00:00",
          "details": "Apply advisory RHSA-2022:8862 as per vendors instructions.",
          "product_ids": [
            "openstack-16.1-default::el8:puppet-0:5.5.10-14.el8ost",
            "openstack-16.1-default::el8:puppet-0:5.5.10-14.el8ost.src",
            "openstack-16.1-default::el8:puppet-headless-0:5.5.10-14.el8ost",
            "openstack-16.1::el8:puppet-0:5.5.10-14.el8ost",
            "openstack-16.1::el8:puppet-0:5.5.10-14.el8ost.src",
            "openstack-16.1::el8:puppet-headless-0:5.5.10-14.el8ost"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2022:8862"
        },
        {
          "category": "vendor_fix",
          "date": "2022-05-04T13:01:38+00:00",
          "details": "Apply advisory RHSA-2022:1708 as per vendors instructions.",
          "product_ids": [
            "rhn_satellite_6.10::el7:puppet-agent-0:6.26.0-1.el7sat",
            "rhn_satellite_6.10::el7:puppet-agent-0:6.26.0-1.el7sat.src",
            "rhn_satellite_6.10::el7:puppetserver-0:6.18.0-1.el7sat",
            "rhn_satellite_6.10::el7:puppetserver-0:6.18.0-1.el7sat.src"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2022:1708"
        },
        {
          "category": "vendor_fix",
          "date": "2022-12-07T19:21:39+00:00",
          "details": "Apply advisory RHSA-2022:8846 as per vendors instructions.",
          "product_ids": [
            "openstack-16.2::el8:puppet-0:5.5.10-14.el8ost",
            "openstack-16.2::el8:puppet-0:5.5.10-14.el8ost.src",
            "openstack-16.2::el8:puppet-headless-0:5.5.10-14.el8ost"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2022:8846"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "openstack-10:puppet",
            "openstack-10:puppet-server",
            "openstack-10:puppet.src",
            "openstack-13:puppet",
            "openstack-13:puppet-server",
            "openstack-13:puppet.src",
            "openstack-16.1-default:puppet-server",
            "openstack-16.2-default:puppet",
            "openstack-16.2-default:puppet-headless",
            "openstack-16.2-default:puppet-server",
            "openstack-16.2-default:puppet.src",
            "rhn_satellite_6-default:puppetserver.src",
            "rhui-3.0:puppet",
            "rhui-3.0:puppet-server",
            "rhui-3.0:puppet.src"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore": 6.3,
            "baseSeverity": "MEDIUM"
          },
          "products": [
            "openstack-10:puppet",
            "openstack-10:puppet-server",
            "openstack-10:puppet.src",
            "openstack-13:puppet",
            "openstack-13:puppet-server",
            "openstack-13:puppet.src",
            "openstack-16.1-default::el8:puppet-0:5.5.10-14.el8ost",
            "openstack-16.1-default::el8:puppet-0:5.5.10-14.el8ost.src",
            "openstack-16.1-default::el8:puppet-headless-0:5.5.10-14.el8ost",
            "openstack-16.1-default:puppet-server",
            "openstack-16.1::el8:puppet-0:5.5.10-14.el8ost",
            "openstack-16.1::el8:puppet-0:5.5.10-14.el8ost.src",
            "openstack-16.1::el8:puppet-headless-0:5.5.10-14.el8ost",
            "openstack-16.2-default:puppet",
            "openstack-16.2-default:puppet-headless",
            "openstack-16.2-default:puppet-server",
            "openstack-16.2-default:puppet.src",
            "openstack-16.2::el8:puppet-0:5.5.10-14.el8ost",
            "openstack-16.2::el8:puppet-0:5.5.10-14.el8ost.src",
            "openstack-16.2::el8:puppet-headless-0:5.5.10-14.el8ost",
            "rhn_satellite_6-default:puppetserver.src",
            "rhn_satellite_6.10::el7:puppet-agent-0:6.26.0-1.el7sat",
            "rhn_satellite_6.10::el7:puppet-agent-0:6.26.0-1.el7sat.src",
            "rhn_satellite_6.10::el7:puppetserver-0:6.18.0-1.el7sat",
            "rhn_satellite_6.10::el7:puppetserver-0:6.18.0-1.el7sat.src",
            "rhui-3.0:puppet",
            "rhui-3.0:puppet-server",
            "rhui-3.0:puppet.src"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate",
          "product_ids": [
            "openstack-10:puppet",
            "openstack-10:puppet-server",
            "openstack-10:puppet.src",
            "openstack-13:puppet",
            "openstack-13:puppet-server",
            "openstack-13:puppet.src",
            "openstack-16.1-default::el8:puppet-0:5.5.10-14.el8ost",
            "openstack-16.1-default::el8:puppet-0:5.5.10-14.el8ost.src",
            "openstack-16.1-default::el8:puppet-headless-0:5.5.10-14.el8ost",
            "openstack-16.1-default:puppet-server",
            "openstack-16.1::el8:puppet-0:5.5.10-14.el8ost",
            "openstack-16.1::el8:puppet-0:5.5.10-14.el8ost.src",
            "openstack-16.1::el8:puppet-headless-0:5.5.10-14.el8ost",
            "openstack-16.2-default:puppet",
            "openstack-16.2-default:puppet-headless",
            "openstack-16.2-default:puppet-server",
            "openstack-16.2-default:puppet.src",
            "openstack-16.2::el8:puppet-0:5.5.10-14.el8ost",
            "openstack-16.2::el8:puppet-0:5.5.10-14.el8ost.src",
            "openstack-16.2::el8:puppet-headless-0:5.5.10-14.el8ost",
            "rhn_satellite_6-default:puppetserver.src",
            "rhn_satellite_6.10::el7:puppet-agent-0:6.26.0-1.el7sat",
            "rhn_satellite_6.10::el7:puppet-agent-0:6.26.0-1.el7sat.src",
            "rhn_satellite_6.10::el7:puppetserver-0:6.18.0-1.el7sat",
            "rhn_satellite_6.10::el7:puppetserver-0:6.18.0-1.el7sat.src",
            "rhui-3.0:puppet",
            "rhui-3.0:puppet-server",
            "rhui-3.0:puppet.src"
          ]
        }
      ],
      "title": "silent configuration failure in agent"
    }
  ]
}