Lucene search
+L

3 matches found

OSV
OSV
added 2022/05/24 4:46 p.m.25 views

GHSA-R3FQ-CMMW-CPMM Containous Traefik Exposes Password Hashes

types/types.go in Containous Traefik 1.7.x through 1.7.11, when the --api flag is used and the API is publicly reachable and exposed without sufficient access control which is contrary to the API documentation, allows remote authenticated users to discover password hashes by reading the Basic HTT...

7.5CVSS7.4AI score0.0259EPSS
SaveExploits1References5
Github Security Blog
Github Security Blog
added 2022/05/24 4:46 p.m.27 views

Containous Traefik Exposes Password Hashes

types/types.go in Containous Traefik 1.7.x through 1.7.11, when the --api flag is used and the API is publicly reachable and exposed without sufficient access control which is contrary to the API documentation, allows remote authenticated users to discover password hashes by reading the Basic HTT...

7.5CVSS6.9AI score0.0259EPSS
SaveExploits1References5Affected Software1
OSV
OSV
added 2019/05/29 7:29 p.m.18 views

CVE-2019-12452

types/types.go in Containous Traefik 1.7.x through 1.7.11, when the --api flag is used and the API is publicly reachable and exposed without sufficient access control which is contrary to the API documentation, allows remote authenticated users to discover password hashes by reading the Basic HTT...

7.5CVSS6.8AI score
SaveExploits0References3
Rows per page
Query Builder