Home
Home
Trends
Trends
Vulnerabilities
Vulnerabilities
News
News
Researchers
Researchers
Why dbugs?
Why dbugs?
Settings

Ldez

#55381of 56,330
3.5Total CVSS
Vulnerabilities · 1
PT-2022-16010
3.5
2022-12-08
Traefik · Traefik · CVE-2022-23469
**Name of the Vulnerable Software and Affected Versions** Traefik versions prior to 2.9.6 **Description** There is a potential issue in Traefik where the Authorization header is displayed in its debug logs. This occurs when the log level is set to DEBUG, and credentials provided using the Authorization header are then visible in the debug logs. Attackers must have access to a user's logging system to exploit this. The issue has been addressed in version 2.9.6. **Recommendations** For versions prior to 2.9.6, upgrade to version 2.9.6 to resolve the issue. For users unable to upgrade, set the log level to `INFO`, `WARN`, or `ERROR` as a temporary workaround.