CVE-2019-20894

Traefik 2.x, in certain configurations, allows HTTPS sessions to proceed without mutual TLS verification in a situation where ERR_BAD_SSL_CLIENT_AUTH_CERT should have occurred.

Score

CVSS 3.1 7.5 High

Status

Modified - cve@mitre.org

Published

2020-07-02

Last modified

2024-08-05

Weaknesses

CWE-295

Affected products

• Traefik (Traefik)

References

• https://github.com/containous/traefik/issues/5312