Advisories · Technology
traefik.
Every CVE that names traefik among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.0 High
Traefik before 2.11.60 and 3.7.16 ForwardAuth NTLM/Negotiate Identity Leak
- traefik
- CWE-488
- CVSS 8.2 High
Traefik 3.2.0 before 3.7.15 FastProxy Data Race Denial of Service
- traefik
- CWE-567
- CVSS 2.1 Low
Traefik 3.7.11 before 3.7.15 Cross-Namespace Authorization Bypass via auth-tls-secret
- traefik
- Broken access control
- CVSS 7.0 High
Traefik 3.7.0-ea.1 before 3.7.15 mTLS Bypass via Ingress NGINX Provider
- traefik
- Authentication bypass
- CVSS 6.9 Medium
Traefik before 2.11.58 and 3.7.13 mTLS Bypass via Negated Host Matcher
- traefik
- CWE-436
- CVSS 7.0 High
Traefik before 2.11.58 and 3.7.14 TLS Config Bypass via NTLM/Kerberos Round Tripper
- traefik
- Weak cryptography or TLS
- CVSS 6.3 Medium
Traefik before 2.11.58 and 3.7.14 Race Condition in NTLM/Kerberos Round Tripper
- traefik
- Race condition
- CVSS 7.0 High
Traefik v3.7.0 before v3.7.14 mTLS Header Spoofing via Ingress-NGINX HTTP Router
- traefik
- Authentication bypass
- CVSS 7.0 High
Traefik before 2.11.58 and 3.7.14 Authentication Bypass via Negotiate Connection Pool
- traefik
- Authentication bypass
- CVSS 7.0 High
Traefik v3.7.0 before v3.7.14 Client CA Mix-up via auth-tls-secret Name Collision
- traefik
- Authentication bypass
- CVSS 7.0 High
Traefik v3.2.0 before v3.7.14 FastProxy NTLM/Negotiate Connection Pool Identity Leak
- traefik
- CWE-488
- CVSS 7.0 High
Traefik v3.7.13 Authentication Bypass via ssl-passthrough Ingress HTTP Router
- traefik
- Authentication bypass
- CVSS 7.0 High
Traefik before v2.11.58 and v3.7.14 SNI Check Bypass via HTTP/2 Scheme
- traefik
- Authentication bypass
- CVSS 6.4 Medium
Traefik before 2.11.46, 3.6.17, and 3.7.1 Cross-Namespace Resource Reference via Kubernetes Annotations
- traefik
- Broken access control
- CVSS 9.3 CriticalCritical · CVSS 9+
Traefik v3.7.0 Authentication Bypass via from-to-www-redirect
- traefik
- Broken access control
- CVSS 8.2 High
Traefik before v2.11.55 and v3.0.0 through v3.7.10 mTLS Bypass via TLS Option Conflict
- traefik
- Broken access control
- CVSS 8.2 High
Traefik v3.7 Authentication Bypass via TLS Option Conflict
- traefik
- Authentication bypass
- CVSS 9.3 CriticalCritical · CVSS 9+
Traefik before v2.11.55 and v3.0.0 through v3.7.10 Authentication Bypass via digestAuth
- traefik
- Authentication bypass
- CVSS 7.0 High
Traefik v3.7.1 crossProviderNamespaces Bypass via Service Middleware
- traefik
- Broken access control