Lucene search
GoogleOSV:GHSA-93J5-G845-9WQPHistoryDec 02, 2021 - 5:52 p.m.
Unsafe HTTP Redirect in Puppet Agent and Puppet Server
2021-12-0217:52:45
Google
osv.dev
61
0.006 Low
EPSS
Percentile
78.0%
A flaw was discovered in Puppet Agent and Puppet Server that may result in a leak of HTTP credentials when following HTTP redirects to a different host. This is similar to CVE-2018-1000007
Related
github
github
Unsafe HTTP Redirect in Puppet Agent and Puppet Server
2021-12-02 17:52:45
Potential leak of authentication data to 3rd parties
2023-04-27 14:02:11
nvd
nvd
CVE-2021-27023
2021-11-18 15:15:09
CVE-2018-1000007
2018-01-24 22:29:00
CVE-2019-15052
2019-08-14 20:15:11
debiancve
debiancve
CVE-2021-27023
2021-11-18 15:15:09
CVE-2018-1000007
2018-01-24 22:29:00
CVE-2021-31879
2021-04-29 05:15:08
nessus
nessus
SUSE SLES12 Security Update : rubygem-puppet (SUSE-SU-2022:3794-1)
2022-10-28 00:00:00
SUSE SLES12 Security Update : puppet (SUSE-SU-2022:3355-1)
2022-09-24 00:00:00
Puppet Agent 6.x < 6.25.1 / 7.x < 7.12.1 Vulnerability
2023-11-01 00:00:00
cve
cve
CVE-2021-27023
2021-11-18 15:15:09
CVE-2018-1000007
2018-01-24 22:29:00
CVE-2019-15052
2019-08-14 20:15:11
prion
prion
Heap overflow
2021-11-18 15:15:00
Authentication flaw
2018-01-24 22:29:00
Authorization
2021-04-29 05:15:00
ubuntucve
ubuntucve
CVE-2021-27023
2021-11-18 00:00:00
CVE-2018-1000007
2018-01-24 00:00:00
CVE-2019-15052
2019-08-14 00:00:00
osv
osv
CVE-2021-27023
2021-11-18 15:15:09
curl - security update
2018-01-26 00:00:00
CVE-2018-1000007
2018-01-24 22:29:00
cvelist
cvelist
CVE-2021-27023
2021-11-18 14:33:18
CVE-2018-1000007
2018-01-24 22:00:00
CVE-2019-15052
2019-08-14 19:38:41
freebsd
freebsd
puppet -- Unsafe HTTP Redirect
2021-11-09 00:00:00
cURL -- Multiple vulnerabilities
2018-01-24 00:00:00
cnvd
cnvd
Puppet Server Information Disclosure Vulnerability
2021-11-13 00:00:00
redhatcve
redhatcve
CVE-2021-27023
2021-11-16 18:08:17
CVE-2018-1000007
2018-01-24 08:19:31
veracode
veracode
Information Disclosure
2022-11-21 03:50:15
Information Disclosure
2019-01-15 09:25:18
redhat
redhat
(RHSA-2022:1478) Important: Satellite 6.9.9 Async Bug Fix Update
2022-04-20 20:12:28
(RHSA-2022:1708) Important: Satellite 6.10.5 Async Bug Fix Update
2022-05-04 12:54:25
(RHSA-2022:4866) Important: Satellite Tools 6.10.5 Async Bug Fix Update
2022-06-01 13:30:58
ibm
ibm
Security Bulletin: IBM Flex System Chassis Management Module (CMM) is affected by a vulnerability in cURL (CVE-2018-1000007)
2023-12-07 22:31:02
openvas
openvas
Debian: Security Advisory (DLA-1263-1)
2018-01-30 00:00:00
SUSE: Security Advisory (SUSE-SU-2018:0217-1)
2021-04-19 00:00:00
Ubuntu: Security Advisory (USN-3554-2)
2022-08-26 00:00:00
hackerone
hackerone
curl: Proxy-Authorization header carried to a new host on a redirect
2021-01-25 02:37:39
debian
debian
[SECURITY] [DLA 1263-1] curl security update
2018-01-29 21:39:06
[SECURITY] [DSA 4098-1] curl security update
2018-01-26 09:59:00
symantec
symantec
cURL/libcURL CVE-2018-1000007 Information Disclosure Vulnerability
2018-01-24 00:00:00
ubuntu
ubuntu
curl vulnerability
2018-02-01 00:00:00
curl vulnerabilities
2018-01-31 00:00:00
fedora
fedora
[SECURITY] Fedora 35 Update: puppet-7.12.1-1.fc35
2021-11-28 00:45:39
[SECURITY] Fedora 26 Update: curl-7.53.1-14.fc26
2018-01-30 17:34:43
[SECURITY] Fedora 27 Update: curl-7.55.1-9.fc27
2018-01-30 18:12:27
rubygems
rubygems
Unsafe HTTP Redirect in Puppet Agent and Puppet Server
2021-12-01 21:00:00
slackware
slackware
[slackware-security] curl
2018-01-25 02:28:38
archlinux
archlinux
[ASA-201801-20] curl: multiple issues
2018-01-28 00:00:00
[ASA-201801-25] lib32-libcurl-gnutls: multiple issues
2018-01-29 00:00:00
[ASA-201801-23] libcurl-compat: multiple issues
2018-01-29 00:00:00
amazon
amazon
Important: curl
2018-02-20 20:57:00
Important: curl
2018-02-07 18:08:00
Medium: nss-pem
2019-01-07 21:51:00
altlinux
altlinux
Security fix for the ALT Linux 8 package curl version 7.58.0-alt1
2018-01-24 00:00:00
cloudfoundry
cloudfoundry
USN-3554-1: curl vulnerabilities | Cloud Foundry
2018-03-01 00:00:00
alpinelinux
alpinelinux
CVE-2021-31879
2021-04-29 05:15:00
gentoo
gentoo
cURL: Multiple vulnerabilities
2018-04-08 00:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2021-1996
2021-07-02 18:19:54
oraclelinux
oraclelinux
curl and nss-pem security and bug fix update
2018-11-05 00:00:00
centos
centos
curl, libcurl, nss security update
2018-11-15 18:44:09
photon
photon
oracle
oracle
Oracle Critical Patch Update Advisory - October 2019
2020-01-22 00:00:00