NetSight
high7.5

CVE-2020-9321

configurationwatcher.go in Traefik 2.x before 2.1.4 and TraefikEE 2.0.0 mishandles the purging of certificate contents from providers before logging.

Impact

configurationwatcher.go in Traefik 2.x before 2.1.4 and TraefikEE 2.0.0 mishandles the purging of certificate contents from providers before logging.

Affected products

VendorProductAffected versions
TraefikTraefik
from 2.0.0 through 2.1.4
TraefikTraefik Enterprise
Version 2.0.0

Weakness classification

References