Threats tagged 'ghsa-432c-8xc8-xf66'

Traefik versions from 3.7.0-ea.1 up to but not including 3.7.15 contain an authentication bypass vulnerability in the Kubernetes Ingress NGINX provider. This flaw causes the silent disabling of mutual TLS (mTLS) configured via the auth-tls-secret annotation. If another Ingress on the same host declares a path without matching auth-tls settings, Traefik falls back to default TLS options, allowing unauthenticated attackers to access backends that require client certificates.