CVE-2018-15598

score

<0.1

cvss

7.5

epss

2.9%

published

2018-08-21

kev added

—

first seen

2026-10-21

Containous Traefik 1.6.x before 1.6.6 contains an information disclosure caused by missing authentication when --api is used, exposing configuration and secrets if the API port is publicly reachable, exploit requires the API port to be accessible publicly.