GHSA-gmph-wf7j-9gcm

ghsaUSosv

Etcd-io Improper Authentication vulnerability

view advisory published 2023-04-04Licence: CC-BY-4.0

Authentication vulnerability found in Etcd-io v.3.4.10 allows remote attackers to escalate privileges via the debug function. This has been fixed in v.[3.5.8](https://github.com/etcd-io/etcd/blob/main/CHANGELOG/CHANGELOG-3.5.md#etcd-server) and was also backported to [3.4](https://github.com/etcd-io/etcd/pull/15655) and [3.5](https://github.com/etcd-io/etcd/pull/15653).

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2021-28235US	critical9.8	1.62% (76th)	Exploit	2023-04-04
Authentication vulnerability found in Etcd-io v.3.4.10 allows remote attackers to escalate privileges via the debug function.

references

External citations — patches, advisories, analysis.

http://etcd.comWEB
https://github.com/etcd-io/etcdPACKAGE
https://github.com/etcd-io/etcd/pull/15648WEB
https://github.com/lucyxss/etcd-3.4.10-test/blob/master/temp4cj.pngWEB
https://github.com/lucyxss/etcd-3.4.10-test/blob/master/temp4cj_2.pngWEB
https://nvd.nist.gov/vuln/detail/CVE-2021-28235ADVISORY

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan