Traefik Missing Authentication

ALTO 7.5CVE-2018-15598 · GHSA-2cjc-rgmp-x649 · GO-2023-1950 · Published 21/08/2018 · updated 17/06/2026

In breve

CVE-2018-15598 è una vulnerabilità ALTO (CVSS 7.5) che riguarda github.com/traefik/traefik, traefik (traefik).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 2.9%, superiore al 86.8% delle vulnerabilità.
Correzione: aggiornare a 1.6.6 o successiva.

Package	Affected versions	Patched versions
github.com/traefik/traefik Go	`≥ 1.6.0, < 1.6.6`	`1.6.6`
traefik traefik	`≥ 1.6.0, < 1.6.6`	`1.6.6`

Description

Containous Traefik 1.6.x before 1.6.6, when --api is used, exposes the configuration and secret if authentication is missing and the API's port is publicly reachable.

NVD description

Containous Traefik 1.6.x before 1.6.6, when --api is used, exposes the configuration and secret if authentication is missing and the API's port is publicly reachable.

References

nvd.nist.gov/vuln/detail/CVE-2018-15598 · ADVISORY
containous/traefik#3790 · WEB
containous/traefik commit 113250c · WEB
containous/traefik commit 368bd17 · WEB
containous/traefik · PACKAGE
containous/traefik release v1.6.6 · WEB
containous/traefik#3790 · Third Party Advisory
containous/traefik#3790 · Third Party Advisory
GitHub Advisory GHSA-2cjc-rgmp-x649 · ADVISORY

Altre vulnerabilità di github.com/traefik/traefik

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

github.com/traefik/traefik

≥ 1.6.0, < 1.6.6

1.6.6

traefik

≥ 1.6.0, < 1.6.6

1.6.6

Description

Containous Traefik 1.6.x before 1.6.6, when --api is used, exposes the configuration and secret if authentication is missing and the API's port is publicly reachable.

NVD description

Containous Traefik 1.6.x before 1.6.6, when --api is used, exposes the configuration and secret if authentication is missing and the API's port is publicly reachable.

Altre vulnerabilità di github.com/traefik/traefik

Vedi tutto →