CVE-2021-27023

A flaw was discovered in Puppet Agent and Puppet Server that may result in a leak of HTTP credentials when following HTTP redirects to a different host. This is similar to CVE-2018-1000007

References

Affected packages

Git / github.com/puppetlabs/puppet-agent

Affected ranges

Type: GIT
Repo: https://github.com/puppetlabs/puppet-agent
Events: Introduced

0 Unknown introduced commit / All previous commits are affected

Fixed

57c0cc7c4389cb2a0adfbc7809e7386fefc925fd

Introduced

ca1209d2558e5fe7832a61238b2d5c013c3ff12e

Fixed

bbd92f8c98fab55e5d01184f275e8e7a69a5e09a

Affected versions

6.*

6.20.0

6.21.0

6.21.1

6.22.0

6.22.1

6.23.0

6.24.0

6.25.0

7.*

7.0.0

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-27023.json"

Git / github.com/puppetlabs/puppetserver

Affected ranges

Type: GIT
Repo: https://github.com/puppetlabs/puppetserver
Events: Introduced

c9ca5e73077a596d2f7cedb8060cb304e96095ea

Fixed

ff0fe3812c4e8f44918cbef1d025a2080e1fa1b0

Affected versions

6.*

6.15.0

6.15.1

6.15.2

6.15.3

6.16.0

6.16.1

6.17.0

7.*

7.0.0

7.0.1

7.0.2

7.0.3

7.1.0

7.1.1

7.1.2

7.2.0

7.2.1

7.3.0

7.4.0

7.4.1

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-27023.json"