Containous Traefik 1.6.x before 1.6.6, when --api is used, exposes the configuration and secret if authentication is missing and the API's port is publicly reachable.
| Package (Ecosystem) | Introduced | Fixed | Limit |
|---|---|---|---|
| github.com/traefik/traefik(Go) | 1.6.0 | 1.6.6 | N/A |
CVSS Metrics
