In Continuous Delivery for Puppet Enterprise (CD4PE) before 3.4.0, changes to resources or classes containing Sensitive parameters can result in the Sensitive parameters ending up in the impact analysis report.
- https://puppet.com/security/cve/CVE-2020-7944
No PoCs found on GitHub currently.