CVE-2021-31879
First published: Thu Apr 29 2021(Updated: )
GNU Wget through 1.21.1 does not omit the Authorization header upon a redirect to a different origin, a related issue to CVE-2018-1000007.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| GNU Wget | <=1.21.1 | |
| Broadcom Brocade Fabric Operating System Firmware | ||
| Netapp Cloud Backup | ||
| NetApp ONTAP Select Deploy administration utility | ||
| Netapp A250 Firmware | ||
| Netapp A250 | ||
| Netapp 500f Firmware | ||
| Netapp 500f |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2021-31879?
CVE-2021-31879 is a vulnerability in GNU Wget through 1.21.1 that does not omit the Authorization header upon a redirect to a different origin.
How severe is CVE-2021-31879?
CVE-2021-31879 has a severity rating of medium with a CVSS score of 6.1.
Which software is affected by CVE-2021-31879?
GNU Wget through 1.21.1, Broadcom Brocade Fabric Operating System Firmware, Netapp Cloud Backup, NetApp ONTAP Select Deploy administration utility, Netapp A250 Firmware, and Netapp 500f Firmware are affected by CVE-2021-31879.
How can I fix CVE-2021-31879?
Update GNU Wget to version 1.21.2 or later to fix CVE-2021-31879.
Are there any references available for CVE-2021-31879?
Yes, you can find references for CVE-2021-31879 at the following links: [Reference 1](https://mail.gnu.org/archive/html/bug-wget/2021-02/msg00002.html) and [Reference 2](https://security.netapp.com/advisory/ntap-20210618-0002/).
- collector/nvd-index
- agent/weakness
- agent/severity
- agent/author
- agent/references
- agent/type
- agent/event
- agent/description
- agent/last-modified-date
- agent/first-publish-date
- agent/softwarecombine
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/gnu
- canonical/gnu wget
- version/gnu wget/1.21.1
- vendor/broadcom
- canonical/broadcom brocade fabric operating system firmware
- vendor/netapp
- canonical/netapp cloud backup
- canonical/netapp ontap select deploy administration utility
- canonical/netapp a250 firmware
- canonical/netapp a250
- canonical/netapp 500f firmware
- canonical/netapp 500f