Code injection

2020-03-1619:15:00

PRIOn knowledge base

www.prio-n.com

0.001 Low

EPSS

Percentile

38.9%

configurationwatcher.go in Traefik 2.x before 2.1.4 and TraefikEE 2.0.0 mishandles the purging of certificate contents from providers before logging.

CPENameOperatorVersion
traefikge2.0.0
traefikle2.1.4
traefikeq2.0.0

Name	Operator	Version
traefik	ge	2.0.0
traefik	le	2.1.4
traefik	eq	2.0.0

References

github.com/containous/traefik/pull/6281

github.com/containous/traefik/releases/tag/v2.1.4

0.001 Low

EPSS

Percentile

38.9%

Related for PRION:CVE-2020-9321