VDB
DEBIAN-CVE-2021-27023
DEBIAN-CVE-2021-27023
PUBLISHED
CVSS 9.800000190734863 CRITICAL
A flaw was discovered in Puppet Agent and Puppet Server that may result in a leak of HTTP credentials when following HTTP redirects to a different host. This is similar to CVE-2018-1000007
Risk Scores
CVSS 3.1
9.800000190734863
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Debian:11 | puppet | 0, 5.5.22-2, 5.5.22-2.1 |
Timeline
- Nov 18, 2021 CVE Published
- Apr 28, 2026 CVE Updated