CVE-2021-27023

CVE-2021-27023 is a critical vulnerability affecting Puppet Agent and Puppet Server, where HTTP credentials can be leaked when following redirects to a different host. With a CVSS score of 9.8, this flaw presents a high risk due to its network-based attack vector, low attack complexity, and potential for complete compromise of confidentiality, integrity, and availability. While no active exploitation or public exploit code has been identified, and community discussion is minimal, organizations using affected Fedora and Puppet products should address this vulnerability promptly.