CVE-2019-20894

Published July 2nd, 2020

View on NVD ↗

CVSS v3

7.5

HIGH

CVSS v2

4.3

MEDIUM

Affected

PROJECT

Description

Traefik 2.x, in certain configurations, allows HTTPS sessions to proceed without mutual TLS verification in a situation where ERR_BAD_SSL_CLIENT_AUTH_CERT should have occurred.

traefik/traefik

The Cloud Native Application Proxy

GitHub

63.7K