Scofaild23

Traefik v3.7.0 before v3.7.14 contains an improper authentication vulnerability in the Kubernetes Ingress NGINX provider that merges client CAs when auth-tls-secret names collide after dot-to-dash normalization. Attackers holding certificates from another host's CA can access a host requiring its own client CA, while that host's legitimate clients are refused.

**Name of the Vulnerable Software and Affected Versions** Malcolm (affected versions not specified) **Description** An inconsistency in URL path normalization exists between the Lua-based role-based access control (RBAC) authorization layer and the nginx request routing logic in the reverse proxy. An authenticated user can bypass role-based restrictions by crafting a specially formatted request path to access administrative or role-gated endpoints. This issue impacts all restricted paths protected by the RBAC layer, such as the file upload, PHP server, htadmin, and authentication management interfaces. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.