CVE-2021-27023
Assigner: puppet
Published: 2021-11-18T14:33:18
State: PUBLISHED
affected: product: Puppet Enterprise, Puppet Server, Puppet Agent
vendor: n/a
versions: status: affected
version: Puppet Enterprise prior to 2019.8.9, Puppet Enterprise prior to 2021.4, Puppet Server prior to 6.17.1, Puppet Server prior to 7.4.2, Puppet Agent prior to 6.25.1, Puppet Agent prior to 7.12.1
descriptions: value: A flaw was discovered in Puppet Agent and Puppet Server that may result in a leak of HTTP credentials when following HTTP redirects to a different host. This is similar to CVE-2018-1000007
problemTypes: descriptions: description: Unsafe HTTP Redirect
type: text