PT-2023-30312 · Traefik +2 · Traefik +2

🗓️ 04 Dec 2023 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbugs.ptsecurity.com👁 19 Views

Traefik versions before 2.10.6 and before 3.0.0-beta5 encode URL fragments, enabling access bypass when chained with a frontend proxy.

Reporter	Title	Published	Views	Family All 11469
IBM Security Bulletins	Security Bulletin: IBM Fusion HCI and IBM Fusion are vulnerable to a denial of service	17 Dec 202418:23	–	ibm
IBM Security Bulletins	Security Bulletin: Security vulnerabilities found in IBM WebSphere Application Server Liberty have been addressed in IBM Security Verify Directory Container (CVE-2023-44487, CVE-2023-46158, CVE-2023-44483, CVE-2023-24998)	25 Mar 202416:38	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities that affects IBM Db2 Data Management Console( CVE-2022-1471,CVE-2024-22259,CVE-2020-8565, CVE-2019-11250,CVE-2023-44487,CVE-2022-46175, CVE-2024-22243)	8 Oct 202512:26	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability CVE-2023-44487 in Go related packages may affect IBM CICS TX Standard	12 Jan 202415:39	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cognos Command Center has addressed vulnerabilities in IBM® Semeru Java™ Version 11 and Eclipse Jetty	11 Jan 202416:22	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Golang Go may affect IBM Decision Optimization for IBM Cloud Pak for Data (CVE-2022-32149, CVE-2022-41721, CVE-2022-41723, CVE-2022-41724, CVE-2022-41725 and CVE-2023-24532)	9 Jan 202413:38	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Concert Software is vulnerable to multiple issues	15 Apr 202503:06	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM watsonx Orchestrate with watsonx Assistant Cartridge	6 Jan 202606:08	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for December 2023.	17 Jan 202407:18	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in snappy-java, Python, postgresql, Golang might affect IBM Spectrum Copy Data Management	15 Dec 202313:03	–	ibm

Source	Link
github	www.github.com/traefik/traefik/security/advisories/GHSA-fvhj-4qfh-q2hm
github	www.github.com/bcdannyboy/CVE-2023-44487
github	www.github.com/imabee101/CVE-2023-44487
github	www.github.com/studiogangster/CVE-2023-44487
github	www.github.com/nxenon/cve-2023-44487
safe-surf	www.safe-surf.ru/specialists/bulletins-nkcki/703455
osv	www.osv.dev/vulnerability/openSUSE-SU-2024:13506-1
osv	www.osv.dev/vulnerability/CVE-2023-47106
safe-surf	www.safe-surf.ru/specialists/bulletins-nkcki/703531
nvd	www.nvd.nist.gov/vuln/detail/CVE-2023-47106

09 Sep 2024 00:00Current

6.5Medium risk

Vulners AI Score6.5

CVSS 3.16.5 - 8.1

EPSS0.99999

SSVC