Red Hat Security Advisory

RHSA-2022:1478

Satellite 6.9.9 Async Bug Fix Update

Released 2022-04-20 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Satellite 6.9 puppet-agent-6.26.0-1.el7sat, puppetserver-6.18.0-1.el7sat
Red Hat Satellite Capsule 6.9 puppet-agent-6.26.0-1.el7sat, puppetserver-6.18.0-1.el7sat

Fixes 1 record

TI-2021-08596 CVE-2021-27023 · GHSA-93j5-g845-9wqp

A flaw was discovered in Puppet Agent and Puppet Server that may result in a leak of HTTP…

MEDIUM 45

A flaw was discovered in Puppet Agent and Puppet Server that may result in a leak of HTTP credentials when following HTTP redirects to a different host.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01372 Published 2021-11-18 Fixed in 7.12.1, 6.25.1