CVE-2019-20894

Traefik 2.x, in certain configurations, allows HTTPS sessions to proceed without mutual TLS verification in a situation where ERR_BAD_SSL_CLIENT_AUTH_CERT…

published July 2, 2020

CVSS
—
EPSS
2%
Percentile
75.0
In the wild
Unconfirmed
What it is

Traefik 2.x, in certain configurations, allows HTTPS sessions to proceed without mutual TLS verification in a situation where ERR_BAD_SSL_CLIENT_AUTH_CERT should have occurred.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01557 · 75.0th percentile
Published
2020-07-02T15:30Z
EPSS history
Timeline
  • 02 JUL 15:30Z
    Traefik 2.x, in certain configurations, allows HTTPS sessions to proceed without mutual TLS verification in a situation where ERR_BAD_SSL_CLIENT_AUTH_CERT…
    cvelistv5