diff --git a/libzypp/zypp/media/MediaCurl.cc b/libzypp/zypp/media/MediaCurl.cc
index 115e06f..cefc299 100644
--- a/libzypp/zypp/media/MediaCurl.cc
+++ b/libzypp/zypp/media/MediaCurl.cc
@@ -591,6 +591,10 @@ void MediaCurl::setupEasy()
   // follow any Location: header that the server sends as part of
   // an HTTP header (#113275)
   SET_OPTION(CURLOPT_FOLLOWLOCATION, 1L);
+  // send user credentials to all hosts the site may redirect to.
+  // see "man curl" and acknowledge the potential security breach when
+  // using --location-trusted
+  SET_OPTION(CURLOPT_UNRESTRICTED_AUTH, 1L);
   // 3 redirects seem to be too few in some cases (bnc #465532)
   SET_OPTION(CURLOPT_MAXREDIRS, 6L);