CVE-2021-27025

23

FAUCET Score

CVE-2021-27025 is a medium-severity vulnerability affecting Puppet Agent and related Puppet products, where the agent might silently disregard Augeas settings or be susceptible to a Denial of Service (DoS) attack before the initial 'pluginsync'. This flaw has a CVSS score of 6.5, indicating a network-based attack with low complexity that could lead to high availability impact. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this vulnerability.

Impacted Technologies

Vendor	Product	Version(s)	CPE
		>= 2021.0.0, < 2021.4.0CPE matchmatch criteria	cpe:2.3:a:puppet:puppet:::::enterprise:::*
		< 6.25.1CPE matchmatch criteria	cpe:2.3:a:puppet:puppet_agent::::::::
		>= 5.5.0, <= 5.5.22CPE matchmatch criteria	cpe:2.3:a:puppet:puppet_agent::::::::
		>= 7.0.0, < 7.12.1CPE matchmatch criteria	cpe:2.3:a:puppet:puppet_agent::::::::
		< 2019.8.9CPE matchmatch criteria	cpe:2.3:a:puppet:puppet_enterprise::::::::

CVSS Data

CVSS version used by this source: 3.1

6.5MEDIUM

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

Exploitability Score

2.8

Impact Score

3.6

CvssVersion

3.1

Exploit Intelligence

EPSS Score

1.15%

Probability of exploitation in next 30 days

EPSS Percentile

63.6%

Percentile rank of EPSS score among Peer Group

As of 2026-07-28

Model: v2026.06.15

This CVE's current EPSS score of 0.0115 is in the 77th percentile among its peer group of 21,977 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (63)

redhatpatch availablevia redhat_api

Product: Satellite Tools 6.9 for RHEL 8Fixed in: puppet-agent-0:6.26.0-1.el8sat

redhatpatch availablevia redhat_api

Product: Satellite Tools 6.9 for RHEL 8.6.E4SFixed in: puppet-agent-0:6.26.0-1.el8sat

redhatpatch availablevia redhat_api

Product: Satellite Tools 6.9 for RHEL 8.6.EUSFixed in: puppet-agent-0:6.26.0-1.el8sat

redhatpatch availablevia redhat_api

Product: Satellite Tools 6.9 for RHEL 8.6.TUSFixed in: puppet-agent-0:6.26.0-1.el8sat

redhatpatch availablevia redhat_api

Product: Red Hat OpenStack Platform 16.1Fixed in: puppet-0:5.5.10-14.el8ost

redhatpatch availablevia redhat_api

Product: Red Hat OpenStack Platform 16.2Fixed in: puppet-0:5.5.10-14.el8ost

redhatpatch availablevia redhat_api

Product: Red Hat Satellite 6.10 for RHEL 7Fixed in: puppet-agent-0:6.26.0-1.el7sat

redhatpatch availablevia redhat_api

Product: Red Hat Satellite 6.10 for RHEL 7Fixed in: puppetserver-0:6.18.0-1.el7sat

redhatpatch availablevia redhat_api

Product: Satellite Tools 6.10 for RHEL 6.ELSFixed in: puppet-agent-0:6.26.0-1.el6sat

redhatpatch availablevia redhat_api

Product: Satellite Tools 6.10 for RHEL 7Fixed in: puppet-agent-0:6.26.0-1.el7sat

redhatpatch availablevia redhat_api

Product: Satellite Tools 6.10 for RHEL 7.2.AUSFixed in: puppet-agent-0:6.26.0-1.el7sat

redhatpatch availablevia redhat_api

Product: Satellite Tools 6.10 for RHEL 7.3.AUSFixed in: puppet-agent-0:6.26.0-1.el7sat

redhatpatch availablevia redhat_api

Product: Satellite Tools 6.10 for RHEL 7.4.AUSFixed in: puppet-agent-0:6.26.0-1.el7sat

redhatpatch availablevia redhat_api

Product: Satellite Tools 6.10 for RHEL 7.4.E4SFixed in: puppet-agent-0:6.26.0-1.el7sat

redhatpatch availablevia redhat_api

Product: Satellite Tools 6.10 for RHEL 7.4.TUSFixed in: puppet-agent-0:6.26.0-1.el7sat

redhatpatch availablevia redhat_api

Product: Satellite Tools 6.10 for RHEL 7.6.AUSFixed in: puppet-agent-0:6.26.0-1.el7sat

redhatpatch availablevia redhat_api

Product: Satellite Tools 6.10 for RHEL 7.6.E4SFixed in: puppet-agent-0:6.26.0-1.el7sat

redhatpatch availablevia redhat_api

Product: Satellite Tools 6.10 for RHEL 7.6.TUSFixed in: puppet-agent-0:6.26.0-1.el7sat

redhatpatch availablevia redhat_api

Product: Satellite Tools 6.10 for RHEL 7.7.AUSFixed in: puppet-agent-0:6.26.0-1.el7sat

redhatpatch availablevia redhat_api

Product: Satellite Tools 6.10 for RHEL 7.7.E4SFixed in: puppet-agent-0:6.26.0-1.el7sat

redhatpatch availablevia redhat_api

Product: Satellite Tools 6.10 for RHEL 7.7.TUSFixed in: puppet-agent-0:6.26.0-1.el7sat

redhatpatch availablevia redhat_api

Product: Satellite Tools 6.10 for RHEL 8Fixed in: puppet-agent-0:6.26.0-1.el8sat

redhatpatch availablevia redhat_api

Product: Satellite Tools 6.10 for RHEL 8.1.E4SFixed in: puppet-agent-0:6.26.0-1.el8sat

redhatpatch availablevia redhat_api

Product: Satellite Tools 6.10 for RHEL 8.1.EUSFixed in: puppet-agent-0:6.26.0-1.el8sat

redhatpatch availablevia redhat_api

Product: Satellite Tools 6.10 for RHEL 8.2.AUSFixed in: puppet-agent-0:6.26.0-1.el8sat

redhatpatch availablevia redhat_api

Product: Satellite Tools 6.10 for RHEL 8.2.E4SFixed in: puppet-agent-0:6.26.0-1.el8sat

redhatpatch availablevia redhat_api

Product: Satellite Tools 6.10 for RHEL 8.2.EUSFixed in: puppet-agent-0:6.26.0-1.el8sat

redhatpatch availablevia redhat_api

Product: Satellite Tools 6.10 for RHEL 8.2.TUSFixed in: puppet-agent-0:6.26.0-1.el8sat

redhatpatch availablevia redhat_api

Product: Satellite Tools 6.10 for RHEL 8.4.AUSFixed in: puppet-agent-0:6.26.0-1.el8sat

redhatpatch availablevia redhat_api

Product: Satellite Tools 6.10 for RHEL 8.4.E4SFixed in: puppet-agent-0:6.26.0-1.el8sat

redhatpatch availablevia redhat_api

Product: Satellite Tools 6.10 for RHEL 8.4.EUSFixed in: puppet-agent-0:6.26.0-1.el8sat

redhatpatch availablevia redhat_api

Product: Satellite Tools 6.10 for RHEL 8.4.TUSFixed in: puppet-agent-0:6.26.0-1.el8sat

redhatpatch availablevia redhat_api

Product: Satellite Tools 6.10 for RHEL 8.6.AUSFixed in: puppet-agent-0:6.26.0-1.el8sat

redhatpatch availablevia redhat_api

Product: Satellite Tools 6.10 for RHEL 8.6.E4SFixed in: puppet-agent-0:6.26.0-1.el8sat

redhatpatch availablevia redhat_api

Product: Satellite Tools 6.10 for RHEL 8.6.EUSFixed in: puppet-agent-0:6.26.0-1.el8sat

redhatpatch availablevia redhat_api

Product: Satellite Tools 6.9 for RHEL 6.ELSFixed in: puppet-agent-0:6.26.0-1.el6sat

redhatpatch availablevia redhat_api

Product: Satellite Tools 6.9 for RHEL 7Fixed in: puppet-agent-0:6.26.0-1.el7sat

redhatpatch availablevia redhat_api

Product: Satellite Tools 6.9 for RHEL 7.2.AUSFixed in: puppet-agent-0:6.26.0-1.el7sat

redhatpatch availablevia redhat_api

Product: Satellite Tools 6.9 for RHEL 7.3.AUSFixed in: puppet-agent-0:6.26.0-1.el7sat

redhatpatch availablevia redhat_api

Product: Satellite Tools 6.9 for RHEL 7.4.AUSFixed in: puppet-agent-0:6.26.0-1.el7sat

redhatpatch availablevia redhat_api

Product: Satellite Tools 6.9 for RHEL 7.4.E4SFixed in: puppet-agent-0:6.26.0-1.el7sat

redhatpatch availablevia redhat_api

Product: Satellite Tools 6.9 for RHEL 7.4.TUSFixed in: puppet-agent-0:6.26.0-1.el7sat

redhatpatch availablevia redhat_api

Product: Satellite Tools 6.9 for RHEL 7.6.AUSFixed in: puppet-agent-0:6.26.0-1.el7sat

redhatpatch availablevia redhat_api

Product: Satellite Tools 6.9 for RHEL 7.6.E4SFixed in: puppet-agent-0:6.26.0-1.el7sat

redhatpatch availablevia redhat_api

Product: Satellite Tools 6.9 for RHEL 7.6.EUSFixed in: puppet-agent-0:6.26.0-1.el7sat

redhatpatch availablevia redhat_api

Product: Satellite Tools 6.9 for RHEL 7.6.TUSFixed in: puppet-agent-0:6.26.0-1.el7sat

redhatpatch availablevia redhat_api

Product: Satellite Tools 6.9 for RHEL 7.7.AUSFixed in: puppet-agent-0:6.26.0-1.el7sat

redhatpatch availablevia redhat_api

Product: Satellite Tools 6.9 for RHEL 7.7.E4SFixed in: puppet-agent-0:6.26.0-1.el7sat

redhatpatch availablevia redhat_api

Product: Satellite Tools 6.9 for RHEL 7.7.EUSFixed in: puppet-agent-0:6.26.0-1.el7sat

redhatpatch availablevia redhat_api

Product: Satellite Tools 6.9 for RHEL 7.7.TUSFixed in: puppet-agent-0:6.26.0-1.el7sat

redhatpatch availablevia redhat_api

Product: Satellite Tools 6.9 for RHEL 8.1.E4SFixed in: puppet-agent-0:6.26.0-1.el8sat

redhatpatch availablevia redhat_api

Product: Satellite Tools 6.9 for RHEL 8.1.EUSFixed in: puppet-agent-0:6.26.0-1.el8sat

redhatpatch availablevia redhat_api

Product: Satellite Tools 6.9 for RHEL 8.2.AUSFixed in: puppet-agent-0:6.26.0-1.el8sat

redhatpatch availablevia redhat_api

Product: Satellite Tools 6.9 for RHEL 8.2.E4SFixed in: puppet-agent-0:6.26.0-1.el8sat

redhatpatch availablevia redhat_api

Product: Satellite Tools 6.9 for RHEL 8.2.EUSFixed in: puppet-agent-0:6.26.0-1.el8sat

redhatpatch availablevia redhat_api

Product: Satellite Tools 6.9 for RHEL 8.2.TUSFixed in: puppet-agent-0:6.26.0-1.el8sat

redhatpatch availablevia redhat_api

Product: Satellite Tools 6.9 for RHEL 8.4.AUSFixed in: puppet-agent-0:6.26.0-1.el8sat

redhatpatch availablevia redhat_api

Product: Satellite Tools 6.9 for RHEL 8.4.E4SFixed in: puppet-agent-0:6.26.0-1.el8sat

redhatpatch availablevia redhat_api

Product: Satellite Tools 6.9 for RHEL 8.4.EUSFixed in: puppet-agent-0:6.26.0-1.el8sat

redhatpatch availablevia redhat_api

Product: Satellite Tools 6.9 for RHEL 8.6.AUSFixed in: puppet-agent-0:6.26.0-1.el8sat

rubygemspatch availablevia ghsa

Product: puppetFixed in: 6.25.1

rubygemspatch availablevia ghsa

Product: puppetFixed in: 7.12.1

redhatend of lifevia redhat_api

Product: Red Hat Update Infrastructure 3 for Cloud ProvidersFixed in: puppet

Vendor Advisories (2)

rubygemsGHSA-q4g7-jrxv-67r9medium

Silent Configuration Failure in Puppet Agent

redhatCVE-2021-27025Moderate

puppet: silent configuration failure in agent

References

lists.fedoraproject.org / archives/list/package-announce%40lists.fedoraproject.org/message/62SELE7EKVKZL4GABFMVYMIIUZ7FPEF7

puppet.com / security/cve/cve-2021-27025

Vendor Advisory