Lucene search
+L

5 matches found

OSV
OSV
•added 2022/05/24 4:46 p.m.•37 views

GHSA-R3FQ-CMMW-CPMM Containous Traefik Exposes Password Hashes

types/types.go in Containous Traefik 1.7.x through 1.7.11, when the --api flag is used and the API is publicly reachable and exposed without sufficient access control which is contrary to the API documentation, allows remote authenticated users to discover password hashes by reading the Basic HTT...

7.5CVSS7.4AI score0.02543EPSS
SaveExploits1References5
Github Security Blog
Github Security Blog
•added 2022/05/24 4:46 p.m.•38 views

Containous Traefik Exposes Password Hashes

types/types.go in Containous Traefik 1.7.x through 1.7.11, when the --api flag is used and the API is publicly reachable and exposed without sufficient access control which is contrary to the API documentation, allows remote authenticated users to discover password hashes by reading the Basic HTT...

7.5CVSS6.9AI score0.02543EPSS
SaveExploits1References5Affected Software1
OSV
OSV
•added 2019/05/29 7:29 p.m.•27 views

CVE-2019-12452

types/types.go in Containous Traefik 1.7.x through 1.7.11, when the --api flag is used and the API is publicly reachable and exposed without sufficient access control which is contrary to the API documentation, allows remote authenticated users to discover password hashes by reading the Basic HTT...

7.5CVSS6.8AI score
SaveExploits0References3
Mend
Mend
•added 2019/05/29 6:43 p.m.•3 views

CVE-2019-12452

types/types.go in Containous Traefik 1.7.x through 1.7.11, when the --api flag is used and the API is publicly reachable and exposed without sufficient access control which is contrary to the API documentation, allows remote authenticated users to discover password hashes by reading the Basic HTT...

7.7CVSS0.02543EPSS
SaveExploits1References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/05/29 12:00 a.m.•6 views

CVE-2019-12452: Insufficiently Protected Credentials

types/types.go in Containous Traefik 1.7.x through 1.7.11, when the --api flag is used and the API is publicly reachable and exposed without sufficient access control which is contrary to the API documentation, allows remote authenticated users to discover password hashes by reading the Basic HTT...

7.5CVSS5.8AI score0.02543EPSS
SaveExploits1References2
Rows per page
Query Builder