How severe is CVE-2022-46153?

This vulnerability has a severity rating of MEDIUM with a CVSS score of 6.5 out of 10.

What type of vulnerability is CVE-2022-46153?

This is classified as CWE-295, which is a common weakness in software security.

CVE-2022-46153 - MEDIUM Severity | CVSS 6.5

Vulnerability Description

Traefik is an open source HTTP reverse proxy and load balancer. In affected versions there is a potential vulnerability in Traefik managing TLS connections. A router configured with a not well-formatted TLSOption is exposed with an empty TLSOption. For instance, a route secured using an mTLS connection set with a wrong CA file is exposed without verifying the client certificates. Users are advised to upgrade to version 2.9.6. Users unable to upgrade should check their logs to detect the error messages and fix your TLS options.

Related Vulnerabilities

CVE-2007-5967

MEDIUM

CVSS:6.5(Medium)

A flaw in Mozilla's embedded certificate code might allow web sites to install root certificates on devices without user approval.

CWE-2952007

CVE-2011-2669

MEDIUM

CVSS:6.5(Medium)

Mozilla Firefox prior to 3.6 has a DoS vulnerability due to an issue in the validation of certificates.

CWE-2952011

CVE-2013-6662

MEDIUM

CVSS:6.5(Medium)

Google Chrome caches TLS sessions before certificate validation occurs.

CWE-2952013

CVE-2014-3250

MEDIUM

CVSS:6.5(Medium)

The default vhost configuration file in Puppet before 3.6.2 does not include the SSLCARevocationCheck directive, which might allow remote attackers to obtain sensitive information via a revoked certif...

CWE-2952014

CVE-2017-18479

MEDIUM

CVSS:6.5(Medium)

In cPanel before 62.0.4, WHM SSL certificate generation uses an unreserved e-mail address (SEC-209).

CWE-2952017

CVE-2017-2629

MEDIUM

CVSS:6.5(Medium)

curl before 7.53.0 has an incorrect TLS Certificate Status Request extension feature that asks for a fresh proof of the server's certificate's validity in the code that checks for a test success or fa...

CWE-2952017