Etcd Gateway TLS authentication only applies to endpoints detected in DNS SRV records

🗓️ 31 Jan 2024 00:56:21Reported by GoogleType

osv🔗 osv.dev👁 20 Views

Etcd gateway TLS authentication limited to DNS SRV record

Reporter	Title	Published	Views	Family All 47
RedhatCVE	CVE-2020-15136	14 Aug 202006:43	–	redhatcve
Veracode	Missing Authentication	11 Aug 202007:59	–	veracode
NVD	CVE-2020-15136	6 Aug 202023:15	–	nvd
Chainguard	CVE-2020-15136 vulnerabilities	6 Aug 202023:15	–	cgr
Prion	Design/Logic Flaw	6 Aug 202023:15	–	prion
CBLMariner	CVE-2020-15136 affecting package etcd for versions less than 3.5.0-3	9 Apr 202206:52	–	cbl_mariner
Wolfi	CVE-2020-15136 vulnerabilities	6 Aug 202023:15	–	wolfi
Debian CVE	CVE-2020-15136	6 Aug 202023:15	–	debiancve
OSV	CVE-2020-15136	6 Aug 202023:15	–	osv
OSV	CGA-RMMJ-65HQ-4VJ9	6 Jun 202412:26	–	osv

Source	Link
github	www.github.com/etcd-io/etcd/security/advisories/GHSA-wr2v-9rpq-c35q
nvd	www.nvd.nist.gov/vuln/detail/CVE-2020-15136
github	www.github.com/etcd-io/etcd/blob/master/Documentation/op-guide/gateway.md
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/L6B6R43Y7M3DCHWK3L3UVGE2K6WWECMP

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

31 Jan 2024 00:21Current

6.7Medium risk

Vulners AI Score6.7

CVSS36.5

EPSS0.00195