CVE-2022-23469

Traefik is an open source HTTP reverse proxy and load balancer. Versions prior to 2.9.6 are subject to a potential vulnerability in Traefik displaying the Authorization header in its debug logs. In certain cases, if the log level is set to DEBUG, credentials provided using the Authorization header are displayed in the debug logs. Attackers must have access to a users logging system in order for credentials to be stolen. This issue has been addressed in version 2.9.6. Users are advised to upgrade. Users unable to upgrade may set the log level to `INFO`, `WARN`, or `ERROR`.

• CWE-200
• CWE-532

• https://github.com/traefik/traefik/pull/9574Patch, Third Party Advisory
• https://github.com/traefik/traefik/releases/tag/v2.9.6Release Notes, Third Party Advisory
• https://github.com/traefik/traefik/security/advisories/GHSA-h2ph-vhm7-g4hpExploit, Patch, Third Party Advisory
• https://github.com/traefik/traefik/pull/9574Patch, Third Party Advisory
• https://github.com/traefik/traefik/releases/tag/v2.9.6Release Notes, Third Party Advisory
• https://github.com/traefik/traefik/security/advisories/GHSA-h2ph-vhm7-g4hpExploit, Patch, Third Party Advisory

Published

Dec 8, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-23463Nepxion Discovery is a solution for Spring Cloud. Discover i…9.8
• CVE-2022-23464Nepxion Discovery is a solution for Spring Cloud. Discovery …7.5
• CVE-2022-23465SwiftTerm is a Xterm/VT100 Terminal emulator. Prior to commi…7.8
• CVE-2022-23466teler is an real-time intrusion detection and threat alert d…5.4
• CVE-2022-23467OpenRazer is an open source driver and user-space daemon to …4.6
• CVE-2022-23468xrdp is an open source project which provides a graphical lo…9.8
• CVE-2022-2347There exists an unchecked length field in UBoot. The U-Boot …7.1
• CVE-2022-23470Galaxy is an open-source platform for data analysis. An arbi…7.5
• CVE-2022-23471containerd is an open source container runtime. A bug was fo…6.5
• CVE-2022-23472Passeo is an open source python password generator. Versions…7.5
• CVE-2022-23473Tuleap is an Open Source Suite to improve management of soft…4.3
• CVE-2022-23474Editor.js is a block-style editor with clean JSON output. Ve…6.1