Lucene search
Veracode Vulnerability DatabaseVERACODE:20404HistoryMay 30, 2019 - 3:21 p.m.
Information Disclosure
2019-05-3015:21:05
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
3
0.012 Low
EPSS
Percentile
84.9%
github.com/containous/traefik is vulnerable to information disclosure.The API allows remote authenticated users to discover password hashes in the JSON response by reading the Basic HTTP Authentication or Digest HTTP Authentication headers, or discover a key by reading the ClientTLS section.
| CPE | Name | Operator | Version |
|---|---|---|---|
| github.com/containous/traefik | eq | HEAD |
Related
cve
cve
CVE-2019-12452
2019-05-29 19:29:00
prion
prion
Design/Logic Flaw
2019-05-29 19:29:00
nvd
nvd
CVE-2019-12452
2019-05-29 19:29:00
osv
osv
CVE-2019-12452
2019-05-29 19:29:00
Containous Traefik Exposes Password Hashes
2022-05-24 16:46:50
github
github
Containous Traefik Exposes Password Hashes
2022-05-24 16:46:50
cvelist
cvelist
CVE-2019-12452
2019-05-29 18:43:05