Threats tagged 'ghsa-6cm8-r9cr-2hc7'

Traefik versions 2.x before 2.11.60 and 3.x before 3.7.16 have a vulnerability where ForwardAuth subrequests and Ingress NGINX auth-url requests are sent through a shared auth-server connection pool. This can expose connection-bound NTLM or Negotiate authentication tokens. An unauthenticated attacker can reuse another user's authenticated connection and impersonate that user to access backend services.