GitHub Advisoryadvisory · Go
GHSA-rvj4-q8q5-8grf ACME DNS: Azure Identity Libraries Elevation of Privilege Vulnerability
MEDIUM
Official page ↗
- Ecosystem
- Go
- Packages
- github.com/traefik/traefik/v3, github.com/traefik/traefik/v2
- Severity
- Moderate
- CVSS vector
- CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
- Weaknesses
- CWE-362
- Reviewed
- 2024-06-20
Affected packages
• Go github.com/traefik/traefik/v3: < 3.0.3 → fixed in 3.0.3
• Go github.com/traefik/traefik/v2: < 2.11.5 → fixed in 2.11.5
Description
Impact
There is a vulnerability in Azure Identity Libraries and Microsoft Authentication Library Elevation of Privilege Vulnerability.
References
• CVE-2024-35255
Patches
• https://github.com/traefik/traefik/releases/tag/v2.11.5
• https://github.com/traefik/traefik/releases/tag/v3.0.3
Workarounds
No workaround.
For more information
If you have any questions or comments about this advisory, please open an issue.
Related
Weakness · CWE (1)
- CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization weakness