Skip to content
OpenAdvisories
Medium · 5.3 CVE-2020-9321 EUVD-2021-2004GHSA-7h6j-2268-fhcmGO-2022-0808

Traefik has an Improper Certificate Handling issue

Published Mar 16, 2020 · Updated Aug 4, 2024 · Assigned by mitre

Package: github.com/containous/traefik Package: github.com/containous/traefik/v2 Package: github.com/traefik/traefik Ecosystem: Go

Description

configurationwatcher.go in Traefik 2.x before 2.1.4 and TraefikEE 2.0.0 mishandles the purging of certificate contents from providers before logging.

Affected packages

EcosystemPackageAffectedFixedRecord
Go github.com/containous/traefik all versions — GO-2022-0808
Go github.com/containous/traefik/v2 < 2.1.4 2.1.4 GO-2022-0808
Go github.com/traefik/traefik < 2.1.4 2.1.4 GHSA-7h6j-2268-fhcm
Go github.com/traefik/traefik all versions — GO-2022-0808

References