Опубликовано: 20 июн. 2024
Источник: github
Github: Прошло ревью
CVSS4: 6.8
CVSS3: 5.5
Описание
ACME DNS: Azure Identity Libraries Elevation of Privilege Vulnerability
Impact
There is a vulnerability in Azure Identity Libraries and Microsoft Authentication Library Elevation of Privilege Vulnerability.
References
Patches
- https://github.com/traefik/traefik/releases/tag/v2.11.5
- https://github.com/traefik/traefik/releases/tag/v3.0.3
Workarounds
No workaround.
For more information
If you have any questions or comments about this advisory, please open an issue.
Пакеты
Наименование
github.com/traefik/traefik/v3
go
Затронутые версииВерсия исправления
<= 3.0.2
3.0.3
Наименование
github.com/traefik/traefik/v2
go
Затронутые версииВерсия исправления
<= 2.11.4
2.11.5
6.8 Medium
CVSS4
5.5 Medium
CVSS3
Дефекты
CWE-362
6.8 Medium
CVSS4
5.5 Medium
CVSS3
Дефекты
CWE-362