Lucene search
PuppetCVELIST:CVE-2021-27023HistoryNov 18, 2021 - 2:33 p.m.
CVE-2021-27023
2021-11-1814:33:18
puppet
www.cve.org
1
A flaw was discovered in Puppet Agent and Puppet Server that may result in a leak of HTTP credentials when following HTTP redirects to a different host. This is similar to CVE-2018-1000007
CNA Affected
[
{
"product": "Puppet Enterprise, Puppet Server, Puppet Agent",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "Puppet Enterprise prior to 2019.8.9, Puppet Enterprise prior to 2021.4, Puppet Server prior to 6.17.1, Puppet Server prior to 7.4.2, Puppet Agent prior to 6.25.1, Puppet Agent prior to 7.12.1"
}
]
}
]Related
github
github
Unsafe HTTP Redirect in Puppet Agent and Puppet Server
2021-12-02 17:52:45
Potential leak of authentication data to 3rd parties
2023-04-27 14:02:11
debiancve
debiancve
CVE-2021-27023
2021-11-18 15:15:09
CVE-2018-1000007
2018-01-24 22:29:00
CVE-2021-31879
2021-04-29 05:15:08
osv
osv
Unsafe HTTP Redirect in Puppet Agent and Puppet Server
2021-12-02 17:52:45
CVE-2021-27023
2021-11-18 15:15:09
curl - security update
2018-01-29 00:00:00
nvd
nvd
CVE-2021-27023
2021-11-18 15:15:09
CVE-2018-1000007
2018-01-24 22:29:00
CVE-2021-31879
2021-04-29 05:15:08
freebsd
freebsd
puppet -- Unsafe HTTP Redirect
2021-11-09 00:00:00
cURL -- Multiple vulnerabilities
2018-01-24 00:00:00
nessus
nessus
Puppet Agent 6.x < 6.25.1 / 7.x < 7.12.1 Vulnerability
2023-11-01 00:00:00
SUSE SLES12 Security Update : puppet (SUSE-SU-2022:3355-1)
2022-09-24 00:00:00
SUSE SLES12 Security Update : rubygem-puppet (SUSE-SU-2022:3794-1)
2022-10-28 00:00:00
ubuntucve
ubuntucve
CVE-2021-27023
2021-11-18 00:00:00
CVE-2018-1000007
2018-01-24 00:00:00
CVE-2021-31879
2021-04-29 00:00:00
prion
prion
Heap overflow
2021-11-18 15:15:00
Authentication flaw
2018-01-24 22:29:00
Authorization
2021-04-29 05:15:00
cve
cve
CVE-2021-27023
2021-11-18 15:15:09
CVE-2018-1000007
2018-01-24 22:29:00
CVE-2021-31879
2021-04-29 05:15:08
cnvd
cnvd
Puppet Server Information Disclosure Vulnerability
2021-11-13 00:00:00
redhatcve
redhatcve
CVE-2021-27023
2021-11-16 18:08:17
CVE-2018-1000007
2018-01-24 08:19:31
redhat
redhat
(RHSA-2022:1478) Important: Satellite 6.9.9 Async Bug Fix Update
2022-04-20 20:12:28
(RHSA-2022:1708) Important: Satellite 6.10.5 Async Bug Fix Update
2022-05-04 12:54:25
(RHSA-2022:4866) Important: Satellite Tools 6.10.5 Async Bug Fix Update
2022-06-01 13:30:58
veracode
veracode
Information Disclosure
2022-11-21 03:50:15
Information Disclosure
2019-01-15 09:25:18
ubuntu
ubuntu
curl vulnerability
2018-02-01 00:00:00
curl vulnerabilities
2018-01-31 00:00:00
ibm
ibm
openvas
openvas
Ubuntu: Security Advisory (USN-3554-2)
2022-08-26 00:00:00
Debian: Security Advisory (DLA-1263-1)
2018-01-30 00:00:00
SUSE: Security Advisory (SUSE-SU-2018:0217-1)
2021-04-19 00:00:00
cvelist
cvelist
CVE-2018-1000007
2018-01-24 22:00:00
CVE-2021-31879
2021-04-29 03:03:15
CVE-2019-15052
2019-08-14 19:38:41
hackerone
hackerone
curl: Proxy-Authorization header carried to a new host on a redirect
2021-01-25 02:37:39
debian
debian
[SECURITY] [DLA 1263-1] curl security update
2018-01-29 21:39:06
[SECURITY] [DSA 4098-1] curl security update
2018-01-26 09:59:00
symantec
symantec
cURL/libcURL CVE-2018-1000007 Information Disclosure Vulnerability
2018-01-24 00:00:00
fedora
fedora
[SECURITY] Fedora 35 Update: puppet-7.12.1-1.fc35
2021-11-28 00:45:39
[SECURITY] Fedora 26 Update: curl-7.53.1-14.fc26
2018-01-30 17:34:43
[SECURITY] Fedora 27 Update: curl-7.55.1-9.fc27
2018-01-30 18:12:27
rubygems
rubygems
Unsafe HTTP Redirect in Puppet Agent and Puppet Server
2021-12-01 21:00:00
cloudfoundry
cloudfoundry
USN-3554-1: curl vulnerabilities | Cloud Foundry
2018-03-01 00:00:00
alpinelinux
alpinelinux
CVE-2021-31879
2021-04-29 05:15:00
amazon
amazon
Important: curl
2018-02-20 20:57:00
Important: curl
2018-02-07 18:08:00
Medium: nss-pem
2019-01-07 21:51:00
altlinux
altlinux
Security fix for the ALT Linux 8 package curl version 7.58.0-alt1
2018-01-24 00:00:00
slackware
slackware
[slackware-security] curl
2018-01-25 02:28:38
archlinux
archlinux
[ASA-201801-20] curl: multiple issues
2018-01-28 00:00:00
[ASA-201801-25] lib32-libcurl-gnutls: multiple issues
2018-01-29 00:00:00
[ASA-201801-23] libcurl-compat: multiple issues
2018-01-29 00:00:00
photon
photon
gentoo
gentoo
cURL: Multiple vulnerabilities
2018-04-08 00:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2021-1996
2021-07-02 18:19:54
oraclelinux
oraclelinux
curl and nss-pem security and bug fix update
2018-11-05 00:00:00
centos
centos
curl, libcurl, nss security update
2018-11-15 18:44:09
oracle
oracle
Oracle Critical Patch Update Advisory - October 2019
2020-01-22 00:00:00