CVE-2022-2394: Perforce Puppet Bolt

Low severity, CVSS 3.5. EPSS: 0.5% chance of exploitation in the next 30 days.

Puppet Bolt prior to version 3.24.0 will print sensitive parameters when planning a run resulting in them potentially being logged when run programmatically, such as via Puppet Enterprise.

Affected products

• Perforce Puppet Bolt: before 3.24.0 (fixed in 3.24.0)

Published 2022-07-19. Last modified 2026-06-17.