Improper Preservation of Permissions in etcd

🗓️ 30 Jan 2024 23:54:26Reported by GitHub Advisory DatabaseType

Improper Preservation of Permissions in etcd. Restricted access permissions not checked for existing directory paths

Reporter	Title	Published	Views	Family All 73
IBM Security Bulletins	Security Bulletin: IBM API Connect is vulnerable to denial of service (DoS) via etcd (CVE-2020-15106 CVE-2020-15112 CVE-2020-15113)	2 Feb 202113:37	–	ibm
IBM Security Bulletins	Security Bulletin: IBM MQ Operator and Queue manager container images are vulnerable to multiple vulnerabilities from systemd, libcap, openssl-libs, libxml2, go-toolset, and prometheus-operator	28 Aug 202308:17	–	ibm
IBM Security Bulletins	Security Bulletin: IBM CICS TX Standard is vulnerable to multiple vulnerabilities in Golang Go.	14 Feb 202321:14	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in go.etcd.io/etcd package affects IBM Watson Machine Learning Accelerator on Cloud Pak for Data	6 Dec 202316:17	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Private is vulnerable to etcd vulnerabilities (CVE-2020-15106, CVE-2020-15112, CVE-2020-15113)	26 Feb 202114:21	–	ibm
IBM Security Bulletins	Security Bulletin: IBM CICS TX Advanced is vulnerable to multiple vulnerabilities in Golang Go.	14 Feb 202321:04	–	ibm
IBM Security Bulletins	Security Bulletin: Open Source Dependency Vulnerability	15 May 202318:36	–	ibm
ALT Linux	Security fix for the ALT Linux 10 package etcd version 3.4.13-alt1	5 Sep 202000:00	–	altlinux
ATTACKERKB	CVE-2020-15113	5 Aug 202020:15	–	attackerkb
CBLMariner	CVE-2020-15113 affecting package etcd for versions less than 3.5.0-3	9 Apr 202206:52	–	cbl_mariner

Vulners

Node

etcd-io etcdRange<3.3.23go

etcd-io etcdRange3.4.0-rc.0–3.4.10go

Source	Link
github	www.github.com/etcd-io/etcd/security/advisories/GHSA-chh6-ppwq-jh92
nvd	www.nvd.nist.gov/vuln/detail/CVE-2020-15113
github	www.github.com/etcd-io/etcd/commit/6be5c54c94298ae6746a574d2af8227d0c9a998b
github	www.github.com/etcd-io/etcd/commit/e5424fc474b274c9e6b5205165015bc2035745f2
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/L6B6R43Y7M3DCHWK3L3UVGE2K6WWECMP/
github	www.github.com/advisories/GHSA-chh6-ppwq-jh92

30 Jan 2024 23:54Current

6.5Medium risk

Vulners AI Score6.5

CVSS 23.6

CVSS 3.15.7 - 7.1

EPSS0.00227