MEDIUM 5.3 Go
Traefik has an Improper Certificate Handling issue
GHSA-7h6j-2268-fhcm · CVE-2020-9321 · GO-2022-0808
Published · Modified
Description
configurationwatcher.go in Traefik 2.x before 2.1.4 and TraefikEE 2.0.0 mishandles the purging of certificate contents from providers before logging.
References
- ADVISORY https://nvd.nist.gov/vuln/detail/CVE-2020-9321
- WEB https://github.com/containous/traefik/pull/6281
- WEB https://github.com/traefik/traefik/pull/6281
- WEB https://github.com/containous/traefik/releases/tag/v2.1.4
- PACKAGE https://github.com/traefik/traefik
- WEB https://github.com/traefik/traefik/releases/tag/v2.1.4
Ready to move
Start Securing
Free, no credit card | First findings in minutes