Ole Herman Elgesem

**Name of the Vulnerable Software and Affected Versions** Northern.tech CFEngine Enterprise versions prior to 3.21.1 **Description** The issue allows a subset of authenticated users to leverage the Scheduled Reports feature to read arbitrary files and potentially discover credentials. **Recommendations** For versions prior to 3.21.1, update to version 3.21.1 or later to resolve the issue. As a temporary workaround, consider restricting access to the Scheduled Reports feature until a patch is available.