CVE-2024-39321 — Authorization Bypass Through User-Controlled Key in Traefik

CWE-639 — Authorization Bypass Through User-Controlled Key6 documents5 sources
Severity
7.5HIGHNVD
EPSS
0.2%
top 60.77%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
TraefikGithub.com Traefik Traefik V2Github.com Traefik Traefik V3
Timeline
PublishedJul 5
Latest updateJul 9

Description

Traefik is an HTTP reverse proxy and load balancer. Versions prior to 2.11.6, 3.0.4, and 3.1.0-rc3 have a vulnerability that allows bypassing IP allow-lists via HTTP/3 early data requests in QUIC 0-RTT handshakes sent with spoofed IP addresses. Versions 2.11.6, 3.0.4, and 3.1.0-rc3 contain a patch for this issue. No known workarounds are available.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:NExploitability: 3.9 | Impact: 3.6

Affected Packages4 packages

▶CVEListV5traefik/traefik< 2.11.6+2
▶NVDtraefik/traefik3.0.0 — 3.0.4+2
▶Gogithub.com/traefik_traefik_v33.0.0-beta3 — 3.0.4+1

Patches

Patch: github.com ↗Patch: github.com ↗

🔴Vulnerability Details

4
OSV
Bypassing IP allow-lists in traefik via HTTP/3 early data requests in QUIC 0-RTT handshakes in github.com/traefik/traefik↗2024-07-09
▶
CVEList
Traefik vulnerable to bypassing IP allow-lists via HTTP/3 early data requests in QUIC 0-RTT handshakes↗2024-07-05
▶
OSV
Bypassing IP allow-lists in traefik via HTTP/3 early data requests in QUIC 0-RTT handshakes↗2024-07-05
▶
GHSA
Bypassing IP allow-lists in traefik via HTTP/3 early data requests in QUIC 0-RTT handshakes↗2024-07-05
▶

📋Vendor Advisories

1
Red Hat
traefik: Bypassing IP allow-lists via HTTP/3 early data requests in QUIC 0-RTT handshakes↗2024-07-04
▶
CVE-2024-39321 — Traefik vulnerability | cvebase