CVE-2022-23469 - CVE House

Back to Database

Status published Low CVE-2022-23469

Authorization header displayed in the debug logs

3.5 CVSS

Vulnerability Description

Traefik is an open source HTTP reverse proxy and load balancer. Versions prior to 2.9.6 are subject to a potential vulnerability in Traefik displaying the Authorization header in its debug logs. In certain cases, if the log level is set to DEBUG, credentials provided using the Authorization header are displayed in the debug logs. Attackers must have access to a users logging system in order for credentials to be stolen. This issue has been addressed in version 2.9.6. Users are advised to upgrade. Users unable to upgrade may set the log level to `INFO`, `WARN`, or `ERROR`.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2022-23469

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

More from traefik

View All →

Traefik has Inverted TLS Verification Logic in its ingress-nginx Provider

Traefik doesn't Prevent Path Normalization Bypass in Router + Middleware Rules

Traefik's Client Plugin is Vulnerable to Path Traversal, Arbitrary File Overwrites and Remote Code Execution

Traefik allows path traversal using url encoding

Traefik has a possible vulnerability with the path matchers

Affected Vendor

traefik

View all reports →

Affected Software

traefik

Vulnerable Versions:

< 2.9.6

Timeline

Official Publish: December 8th, 2022

Last Modified: April 22nd, 2025

Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:N

Weaknesses (CWE)

MITRE ATT&CK TTPs

T1213 Data from Information Repositories

T1005 Data from Local System

T1552 Unsecured Credentials

Credential Access

T1041 Exfiltration Over C2 Channel