CVE-2021-27023

CVE-2021-27023

EPSS 1.3%

A flaw was discovered in Puppet Agent and Puppet Server that may result in a leak of HTTP credentials when following HTTP redirects to a different host. This is similar to CVE-2018-1000007

Affected products

n/a · Puppet Enterprise, Puppet Server, Puppet Agent

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/62SELE7EKVKZL4GABFMVYMIIUZ7FPEF7/https://puppet.com/security/cve/CVE-2021-27023