Improper Authentication

🗓️ 04 Apr 2023 00:00:00Reported by https://gitlab.com/gitlab-org/security-products/gemnasium-dbType

gitlab

gitlab🔗 gitlab.com👁 25 Views

Etcd-io v.3.4.10 Authentication Vulnerability - Privilege Escalation via Debug Function

Reporter	Title	Published	Views	Family All 95
ALT Linux	Security fix for the ALT Linux 10 package etcd version 3.5.8-alt1	17 Apr 202300:00	–	altlinux
AstraLinux	Astra Linux – Vulnerability in etcd	3 May 202623:59	–	astralinux
IBM Security Bulletins	Security Bulletin: IBM Storage Protect Server is susceptible to multiple vulnerabilities due to key-value store "etcd". (CVE-2018-1098, CVE-2018-1099, CVE-2022-34038, CVE-2021-2823).	29 Oct 202409:50	–	ibm
IBM Security Bulletins	Security Bulletin: A vulnerability in Etcd-io could affect IBM CICS TX Advanced [CVE-2021-28235]	25 May 202313:06	–	ibm
IBM Security Bulletins	Security Bulletin: A vulnerability in Etcd-io could affect IBM CICS TX Standard [CVE-2021-28235]	25 May 202312:59	–	ibm
BDU FSTEC	The vulnerability of the Etcd configuration store, related to incorrect authentication, allows attackers to escalate their privileges.	15 Apr 202400:00	–	bdu_fstec
CBLMariner	CVE-2021-28235 affecting package etcd for versions less than 3.5.4-6	14 Feb 202320:38	–	cbl_mariner
Circl	CVE-2021-28235	14 Feb 202519:11	–	circl
CNNVD	etcd 授权问题漏洞	4 Apr 202300:00	–	cnnvd
CVE	CVE-2021-28235	4 Apr 202300:00	–	cve

Vulners

Node

go v3Match3.4.10

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-28235
github	www.github.com/etcd-io/etcd
github	www.github.com/lucyxss/etcd-3.4.10-test/blob/master/temp4cj.png
github	www.github.com/lucyxss/etcd-3.4.10-test/blob/master/temp4cj_2.png
etcd	www.etcd.com/
github	www.github.com/etcd-io/etcd/pull/15648
github	www.github.com/advisories/GHSA-gmph-wf7j-9gcm

04 Apr 2023 00:00Current

9High risk

Vulners AI Score9

CVSS 3.19.8

EPSS0.01605

SSVC

authentication vulnerability etcd-io privilege escalation debug function