Matiasinsaurralde

**Name of the Vulnerable Software and Affected Versions** Traefik versions prior to 2.11.55 **Description** An authentication bypass exists in the `digestAuth` middleware. The issue occurs because unknown usernames are assigned an empty secret instead of being rejected. This allows an attacker to calculate a valid digest response using the empty secret and arbitrary credentials, granting unauthorized access to any route protected by the `digestAuth` middleware without requiring a valid username or password. **Recommendations** Update to version 2.11.55 or later.