3 matches found
FreeBSD : Containous Traefik -- exposes the configuration and secret (fe818607-b5ff-11e8-856b-485b3931c969)
MITRE reports : Containous Traefik 1.6.x before 1.6.6, when --api is used, exposes the configuration and secret if authentication is missing and the API's port is publicly reachable. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the...
CVE-2018-15598
Containous Traefik 1.6.x before 1.6.6, when --api is used, exposes the configuration and secret if authentication is missing and the API's port is publicly reachable...
CVE-2018-15598
Traefik 1.6.x before 1.6.6 exposes configuration and secrets when the API is enabled (--api) and the API port is publicly reachable if authentication is missing. Root cause is missing authentication on the API surface, leading to information disclosure. Impact is disclosure of sensitive configura...