PT-2026-40488

Уязвимость промежуточного программного обеспечения StripPrefixRegex обратного прокси сервера Containous Traefik связана с использованием имени с неправильной ссылкой. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, получить доступ к защищаемой информации...

PT-2026-40489

Уязвимость провайдера Kubernetes CRD обратного прокси сервера Containous Traefik связана с недостаточным пространственным разделением. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, позволяющая нарушителю обойти существующие ограничения доступа...

EUVD-2022-1966

Malicious code in bioql PyPI...

GO-2022-0808 Improper Certificate Handling in github.com/containous/traefik

Improper Certificate Handling in github.com/containous/traefik...

GO-2022-0774 Improper Authentication in github.com/containous/traefik

Improper Authentication in github.com/containous/traefik...

GO-2023-1919 Containous Traefik Exposes Password Hashes in github.com/traefik/traefik

Containous Traefik Exposes Password Hashes in github.com/traefik/traefik...

Containous Traefik Resource Management Error Vulnerability

Containous Traefik is a reverse proxy and load balancer from Containous USA. Traefik suffers from a resource management error vulnerability that stems from allowing 100% CPU usage...

Containous Traefik Security Vulnerability

Containous Traefik is a reverse proxy and load balancer from Containous, USA. A security vulnerability exists in Traefik v2.10.5 and earlier, v3.0.0-beta4 and earlier, which can be exploited by an attacker to conduct a Slowloris attack when Traefik is configured to generate and update certificate...

Containous Traefik 信任管理问题漏洞

Containous Traefik is a reverse proxy and load balancer from US-based Containous. A trust management issue vulnerability exists in Containous Traefik versions prior to 2.9.6, which stems from a potential issue when managing TLS connections, where routers configured with an incorrectly formatted...

Containous Traefik Exposes Password Hashes

types/types.go in Containous Traefik 1.7.x through 1.7.11, when the --api flag is used and the API is publicly reachable and exposed without sufficient access control which is contrary to the API documentation, allows remote authenticated users to discover password hashes by reading the Basic HTT...

GHSA-R3FQ-CMMW-CPMM Containous Traefik Exposes Password Hashes

types/types.go in Containous Traefik 1.7.x through 1.7.11, when the --api flag is used and the API is publicly reachable and exposed without sufficient access control which is contrary to the API documentation, allows remote authenticated users to discover password hashes by reading the Basic HTT...

Containous Traefik Trust Management Issue Vulnerability (CNVD-2022-13371)

Containous Traefik is a reverse proxy and load balancer from Containous, U.S. Containous Traefik is vulnerable to a trust management issue that stems from the fact that when a request is sent using an FQDN processed by a router configured with a dedicated TLS configuration, the TLS configuration...

Containous Traefik Elevation of Privilege Vulnerability

Containous Traefik is a reverse proxy and load balancer from the US company Containous. versions prior to Traefik 2.4.13 have a security vulnerability that can be exploited by attackers to elevate privileges...

Containous Traefik 安全漏洞

Containous Traefik is a reverse proxy and load balancer from the US company Containous. versions prior to Traefik 2.4.13 have a security vulnerability that can be exploited by attackers to elevate privileges...

Containous Traefik Security Vulnerability

Containous Traefik is a reverse proxy and load balancer from Containous USA. A security vulnerability exists in Containous Traefik. The vulnerability stems from the software allowing IFRAME to be loaded from other domains.The following products and versions are affected:Containous Traefik 2.4.3...

Containous Traefik Trust Management Issues Vulnerability (CNVD-2021-18240)

Containous Traefik is a reverse proxy and load balancer from Containous USA. A vulnerability in Containous Traefik version 2.x exists due to a trust management issue. The vulnerability stems from the lack of an effective trust management mechanism in a networked system or product. An attacker can...

CVE-2019-12452

types/types.go in Containous Traefik 1.7.x through 1.7.11, when the --api flag is used and the API is publicly reachable and exposed without sufficient access control which is contrary to the API documentation, allows remote authenticated users to discover password hashes by reading the Basic HTT...

Design/Logic Flaw

types/types.go in Containous Traefik 1.7.x through 1.7.11, when the --api flag is used and the API is publicly reachable and exposed without sufficient access control which is contrary to the API documentation, allows remote authenticated users to discover password hashes by reading the Basic HTT...

CVE-2019-12452

CVE-2019-12452 affects Containous Traefik 1.7.x (1.7.11 and earlier). When --api is enabled and publicly reachable with insufficient access control, remote authenticated users can read the JSON response of /api to discover password hashes from Basic/Digest HTTP Authentication and can read a Clien...

CVE-2019-12452

types/types.go in Containous Traefik 1.7.x through 1.7.11, when the --api flag is used and the API is publicly reachable and exposed without sufficient access control which is contrary to the API documentation, allows remote authenticated users to discover password hashes by reading the Basic HTT...