What is GHSA-2cjc-rgmp-x649?

GHSA-2cjc-rgmp-x649 is a security advisory published by GitHub Security Advisories with High severity. Traefik Missing Authentication

Which CVE IDs does GHSA-2cjc-rgmp-x649 cover?

GHSA-2cjc-rgmp-x649 covers the following CVE IDs: CVE-2018-15598. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-2cjc-rgmp-x649?

GHSA-2cjc-rgmp-x649 has a CVSS v3 base score of 7.5, published by GitHub Security Advisories.

Which products are affected by GHSA-2cjc-rgmp-x649?

GHSA-2cjc-rgmp-x649 affects 1 product, including: go/github.com/traefik/traefik:\u003e= 1.6.0, \u003c 1.6.6.

GHSA-2cjc-rgmp-x649HighCVSS 7.5

Traefik Missing Authentication

Vendor

GitHub Security Advisories

Published

May 13, 2022

Last Modified

October 5, 2023

🔗 CVE IDs covered (1)

CVE-2018-15598 →

📋 Description

Containous Traefik 1.6.x before 1.6.6, when --api is used, exposes the configuration and secret if authentication is missing and the API's port is publicly reachable.

🎯 Affected products1

go/github.com/traefik/traefik:>= 1.6.0, < 1.6.6

🔗 References (6)

https://nvd.nist.gov/vuln/detail/CVE-2018-15598
https://github.com/containous/traefik/pull/3790
https://github.com/containous/traefik/releases/tag/v1.6.6
https://github.com/containous/traefik/commit/113250ce5735d554c502ca16fb03bb9119ca79f1
https://github.com/containous/traefik/commit/368bd170913078732bde58160f92f202f370278b
https://github.com/advisories/GHSA-2cjc-rgmp-x649