GNU Wget through 1.21.1 does not omit the Authorization header upon a redirect to a different origin, a related issue to CVE-2018-1000007.

An update of the wget package has been released.

This plugin has been deprecated as it does not adhere to established standards for this style of check.

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2023-012 advisory.

  - GNU Wget through 1.21.1 does not omit the Authorization header upon a redirect to a different origin, a     related issue to CVE-2018-1000007. (CVE-2021-31879)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
203149	Photon OS 4.0: Wget PHSA-2022-4.0-0178	Nessus	PhotonOS Local Security Checks	medium
195402	RHEL 7 : wget (Unpatched Vulnerability) (deprecated)	Nessus	Red Hat Local Security Checks	high
195367	RHEL 6 : wget (Unpatched Vulnerability) (deprecated)	Nessus	Red Hat Local Security Checks	high
173167	Amazon Linux 2023 : wget (ALAS2023-2023-012)	Nessus	Amazon Linux Local Security Checks	medium

Detections

Analytics

CVE-2021-31879

medium

Tenable Plugins

medium

high

high

medium