Traefik v3.7.13 before v3.7.14 contains an access-control bypass in the Kubernetes Ingress NGINX provider, where the HTTP router generated for…
Traefik v3.7.13 before v3.7.14 contains an access-control bypass in the Kubernetes Ingress NGINX provider, where the HTTP router generated for ssl-passthrough Ingresses on non-TLS entry points never applies the Ingress's access-control annotations. Unauthenticated attackers reaching the HTTP entry point with the Ingress host can access backends protected by auth-type, auth-url, or whitelist-source-range annotations, with nothing logged.
Read at NIST National Vulnerability Database (CVE API 2.0)
- Vendor
- F5, Kubernetes
- Product
- NGINX, Squid / HAProxy / Varnish, Kubernetes
- CVSS
- 8.7
- EPSS
- 0.002 (p16)
- Exposure class
- Web platform, Edge / VPN / firewall, Developer platform
Why it ranks 22 (Routine)
- CVSS 8.7 high
- Exposed product class: edge / VPN / firewall
- Recency: items published within 24 hours gain 15, within 72 hours 6, within 7 days 2.