CVE-2021-27023 PUBLISHED

A flaw was discovered in Puppet Agent and Puppet Server that may result in a leak of HTTP credentials when following HTTP redirects to a different host. This is similar to CVE-2018-1000007

EPSS 0.40% · 60.3th percentile

Risk Scores

EPSS Score
0.40%
60.3th percentile

Affected Products

VendorProductVersions
Ubuntu:Pro:16.04:LTSpuppet0, 3.7.2-5ubuntu2, 3.8.4-1ubuntu1
Ubuntu:14.04:LTSpuppet3.4.3-1ubuntu1, 3.4.3-1ubuntu1.1, 3.4.3-1ubuntu1.2
Ubuntu:22.04:LTSpuppet5.5.22-4ubuntu0.2, 5.5.22-4, 5.5.22-1ubuntu1
Ubuntu:18.04:LTSpuppet5.4.0-2ubuntu3, 0, 4.10.4-2ubuntu1
Ubuntu:20.04:LTSpuppet5.5.10-4ubuntu3, 5.4.0-2ubuntu3, 0

Timeline

References

Open in Interactive Console →