CVE-2021-27023 — n/a / Puppet Enterprise, Puppet Server, Puppet Agent

Description (CNA)

A flaw was discovered in Puppet Agent and Puppet Server that may result in a leak of HTTP credentials when following HTTP redirects to a different host. This is similar to CVE-2018-1000007

Affected (CNA)

Vendor / product	Versions
n/a / Puppet Enterprise, Puppet Server, Puppet Agent	affected Puppet Enterprise prior to 2019.8.9, Puppet Enterprise prior to 2021.4, Puppet Server prior to 6.17.1, Puppet Server prior to 7.4.2, Puppet Agent prior to 6.25.1, Puppet Agent prior to 7.12.1

CWE

No CWE identifiers supplied.

References

https://puppet.com/security/cve/CVE-2021-27023
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/62SELE7EKVKZL4GABFMVYMIIUZ7FPEF7/

ADP enrichment

CVE

No English description supplied.

https://puppet.com/security/cve/CVE-2021-27023
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/62SELE7EKVKZL4GABFMVYMIIUZ7FPEF7/