Traefik · Traefik · CVE-2022-23469
**Name of the Vulnerable Software and Affected Versions**
Traefik versions prior to 2.9.6
**Description**
There is a potential issue in Traefik where the Authorization header is displayed in its debug logs. This occurs when the log level is set to DEBUG, and credentials provided using the Authorization header are then visible in the debug logs. Attackers must have access to a user's logging system to exploit this. The issue has been addressed in version 2.9.6.
**Recommendations**
For versions prior to 2.9.6, upgrade to version 2.9.6 to resolve the issue.
For users unable to upgrade, set the log level to `INFO`, `WARN`, or `ERROR` as a temporary workaround.