1206 matches found
Code injection
configurationwatcher.go in Traefik 2.x before 2.1.4 and TraefikEE 2.0.0 mishandles the purging of certificate contents from providers before logging...
CVE-2020-9321
configurationwatcher.go in Traefik 2.x before 2.1.4 and TraefikEE 2.0.0 mishandles the purging of certificate contents from providers before logging...
CVE-2020-9321
The CVE-2020-9321 issue affects Traefik 2.x (before 2.1.4) and TraefikEE 2.0.0, where configurationwatcher.go mishandles purging of certificate contents from providers before logging. This can lead to information disclosure of certificate data because sensitive material may be logged. Exploitatio...
CVE-2020-9321
configurationwatcher.go in Traefik 2.x before 2.1.4 and TraefikEE 2.0.0 mishandles the purging of certificate contents from providers before logging...
PT-2020-20582 · Containous +1 · Traefik +2
Name of the Vulnerable Software and Affected Versions: Traefik versions 2.0.0 through 2.1.3 TraefikEE version 2.0.0 Description: The issue is related to improper certificate handling. Specifically, the configurationwatcher.go file in Traefik mishandles the purging of certificate contents from...
Security fix for the ALT Linux 10 package traefik version 1.7.14-alt1
Aug. 23, 2019 Alexey Shabalin 1.7.14-alt1 - 1.7.14 - build with golang-1.12.9 Fixes: CVE-2019-9512, CVE-2019-9514...
FreeBSD : traefik -- Denial of service in HTTP/2 (41f4baac-bf77-11e9-8d2f-5404a68ad561) (Ping Flood) (Reset Flood)
The traefik project reports : Update of dependency to go go1.12.8 resolves potential HTTP/2 denial of service in traefik. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML database : Copyright 2003-2022 Jacques Vidrine an...
traefik -- Denial of service in HTTP/2
The traefik project reports: Update of dependency to go go1.12.8 resolves potential HTTP/2 denial of service in traefik...
Information Disclosure
github.com/containous/traefik is vulnerable to information disclosure.The API allows remote authenticated users to discover password hashes in the JSON response by reading the Basic HTTP Authentication or Digest HTTP Authentication headers, or discover a key by reading the ClientTLS section...
CVE-2019-12452
types/types.go in Containous Traefik 1.7.x through 1.7.11, when the --api flag is used and the API is publicly reachable and exposed without sufficient access control which is contrary to the API documentation, allows remote authenticated users to discover password hashes by reading the Basic HTT...
Design/Logic Flaw
types/types.go in Containous Traefik 1.7.x through 1.7.11, when the --api flag is used and the API is publicly reachable and exposed without sufficient access control which is contrary to the API documentation, allows remote authenticated users to discover password hashes by reading the Basic HTT...
CVE-2019-12452
types/types.go in Containous Traefik 1.7.x through 1.7.11, when the --api flag is used and the API is publicly reachable and exposed without sufficient access control which is contrary to the API documentation, allows remote authenticated users to discover password hashes by reading the Basic HTT...
CVE-2019-12452
CVE-2019-12452 affects Containous Traefik 1.7.x (1.7.11 and earlier). When --api is enabled and publicly reachable with insufficient access control, remote authenticated users can read the JSON response of /api to discover password hashes from Basic/Digest HTTP Authentication and can read a Clien...
CVE-2019-12452
types/types.go in Containous Traefik 1.7.x through 1.7.11, when the --api flag is used and the API is publicly reachable and exposed without sufficient access control which is contrary to the API documentation, allows remote authenticated users to discover password hashes by reading the Basic HTT...
PT-2019-12799 · Containous +1 · Traefik +1
Name of the Vulnerable Software and Affected Versions: Containous Traefik versions 1.7.x through 1.7.11 Description: The issue allows remote authenticated users to discover password hashes by reading the Basic HTTP Authentication or Digest HTTP Authentication section, or discover a key by reading...
FreeBSD : Containous Traefik -- exposes the configuration and secret (fe818607-b5ff-11e8-856b-485b3931c969)
MITRE reports : Containous Traefik 1.6.x before 1.6.6, when --api is used, exposes the configuration and secret if authentication is missing and the API's port is publicly reachable. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the...
The vulnerability of the API component of the Containous Traefik reverse proxy server allows attackers to disclose protected information.
The vulnerability of the Containous Traefik reverse proxy server’s API is related to implementation errors in the API. Exploiting this vulnerability can allow a malicious actor to disclose protected information...
Information Disclosure
github.com/containous/traefik is vulnerable to information disclosure. The configuration and secret is disclosed when authentication is missing and the --api is used. If the API is publicly accessible, an attacker will be able to exploit the vulnerability to obtain the configuration and secret...