~ / search / GHSA-7h6j-2268-fhcm

GHSA-7h6j-2268-fhcm

Traefik has an Improper Certificate Handling issue

Source: GitHub Advisory Database (reviewed) Moderate CVE-2020-9321

Packages

EcosystemPackageAffectedFixed in
Go github.com/traefik/traefik < 2.1.4 2.1.4

Details

As written in the advisory (Markdown source, shown as plain text).

configurationwatcher.go in Traefik 2.x before 2.1.4 and TraefikEE 2.0.0 mishandles the purging of certificate contents from providers before logging.

References

External links from the advisory. They lead to third-party sites.