truecharts/charts/stable/traefik/security.md

hide

hide
toc

Security Overview

Helm-Chart

Scan Results

Chart Object: traefik/templates/common.yaml

Type	Misconfiguration ID	Check	Severity	Explaination	Links
Rbac Security Check	KSV041	Do not allow management of secrets	CRITICAL	Expand... Check whether role permits managing secrets Role permits management of secret(s)	Expand... https://kubernetes.io/docs/concepts/security/rbac-good-practices/ https://avd.aquasec.com/misconfig/ksv041

No Misconfigurations found

No Misconfigurations found

No Misconfigurations found

No Misconfigurations found

Containers

Detected Containers

      tccr.io/truecharts/alpine:v3.16.0@sha256:16dc15f3d61a1e30b1df9f839e53636847b6097286b2b74c637b25fd8264f730
      tccr.io/truecharts/traefik:v2.7.1@sha256:82ca1c80d44222f330264c1db7a02eff0fd2d4db4cdf53e7711cb6adeaeba9e4

Scan Results

Container: tccr.io/truecharts/alpine:v3.16.0@sha256:16dc15f3d61a1e30b1df9f839e53636847b6097286b2b74c637b25fd8264f730 (alpine 3.16.0)

alpine

No Vulnerabilities found

Container: tccr.io/truecharts/traefik:v2.7.1@sha256:82ca1c80d44222f330264c1db7a02eff0fd2d4db4cdf53e7711cb6adeaeba9e4 (alpine 3.15.4)

alpine

No Vulnerabilities found

gobinary

Package	Vulnerability	Severity	Installed Version	Fixed Version	Links
github.com/containerd/containerd	CVE-2022-23648	HIGH	v1.5.9	1.4.13, 1.5.10, 1.6.1	Expand... http://packetstormsecurity.com/files/166421/containerd-Image-Volume-Insecure-Handling.html https://access.redhat.com/security/cve/CVE-2022-23648 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-23648 https://github.com/advisories/GHSA-crp2-qrr5-8pq7 https://github.com/containerd/containerd/commit/10f428dac7cec44c864e1b830a4623af27a9fc70 https://github.com/containerd/containerd/releases/tag/v1.4.13 https://github.com/containerd/containerd/releases/tag/v1.5.10 https://github.com/containerd/containerd/releases/tag/v1.6.1 https://github.com/containerd/containerd/security/advisories/GHSA-crp2-qrr5-8pq7 https://github.com/containerd/containerd/security/advisories/GHSA-crp2-qrr5-8pq7. https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AUDQUQBZJGBWJPMRVB6QCCCRF7O3O4PA/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HFTS2EF3S7HNYSNZSEJZIJHPRU7OPUV3/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OCCARJ6FU4MWBTXHZNMS7NELPDBIX2VO/ https://nvd.nist.gov/vuln/detail/CVE-2022-23648 https://ubuntu.com/security/notices/USN-5311-1 https://ubuntu.com/security/notices/USN-5311-2 https://www.debian.org/security/2022/dsa-5091
github.com/docker/distribution	GHSA-qq97-vm5h-rrhg	UNKNOWN	v2.7.1+incompatible	v2.8.0	Expand... https://github.com/advisories/GHSA-qq97-vm5h-rrhg https://github.com/distribution/distribution/commit/b59a6f827947f9e0e67df0cfb571046de4733586 https://github.com/distribution/distribution/security/advisories/GHSA-qq97-vm5h-rrhg https://github.com/opencontainers/image-spec/pull/411
github.com/hashicorp/consul	CVE-2022-29153	HIGH	v1.10.4	1.9.17, 1.10.10, 1.11.5	Expand... https://discuss.hashicorp.com https://discuss.hashicorp.com/t/hcsec-2022-10-consul-s-http-health-check-may-allow-server-side-request-forgery/38393 https://nvd.nist.gov/vuln/detail/CVE-2022-29153 https://security.netapp.com/advisory/ntap-20220602-0005/
github.com/hashicorp/consul	CVE-2022-24687	MEDIUM	v1.10.4	1.9.15, 1.10.8, 1.11.3	Expand... https://discuss.hashicorp.com https://discuss.hashicorp.com/t/hcsec-2022-05-consul-ingress-gateway-panic-can-shutdown-servers/ https://nvd.nist.gov/vuln/detail/CVE-2022-24687 https://security.netapp.com/advisory/ntap-20220331-0006/