PT-2020-14195 · Coreos +3 · Etcd +3

🗓️ 05 Aug 2020 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbugs.ptsecurity.com👁 1 Views

Etcd insecure directory creation via a directory function affects data and TLS cert dirs; set permissions to 700.

Reporter	Title	Published	Views	Family All 249
IBM Security Bulletins	Security Bulletin: IBM API Connect is vulnerable to denial of service (DoS) via etcd (CVE-2020-15106 CVE-2020-15112 CVE-2020-15113)	2 Feb 202113:37	–	ibm
IBM Security Bulletins	Security Bulletin: IBM MQ Operator and Queue manager container images are vulnerable to multiple vulnerabilities from systemd, libcap, openssl-libs, libxml2, go-toolset, and prometheus-operator	28 Aug 202308:17	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities affect Go related packages shipped with IBM CICS TX Standard.	16 Apr 202516:38	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities affect IBM® Db2® On Openshift and IBM® Db2® and Db2 Warehouse® on Cloud Pak for Data	29 Jun 202217:05	–	ibm
IBM Security Bulletins	Security Bulletin: IBM CICS TX Standard is vulnerable to multiple vulnerabilities in Golang Go.	14 Feb 202321:14	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in go.etcd.io/etcd package affects IBM Watson Machine Learning Accelerator on Cloud Pak for Data	6 Dec 202316:17	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Private is vulnerable to etcd vulnerabilities (CVE-2020-15106, CVE-2020-15112, CVE-2020-15113)	26 Feb 202114:21	–	ibm
IBM Security Bulletins	Security Bulletin: IBM CICS TX Advanced is vulnerable to multiple vulnerabilities in Golang Go.	14 Feb 202321:04	–	ibm
IBM Security Bulletins	Security Bulletin: Open Source Dependency Vulnerability	15 May 202318:36	–	ibm
ALT Linux	Security fix for the ALT Linux 10 package etcd version 3.4.13-alt1	5 Sep 202000:00	–	altlinux

Source	Link
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/L6B6R43Y7M3DCHWK3L3UVGE2K6WWECMP
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
ubuntu	www.ubuntu.com/security/CVE-2020-15112
osv	www.osv.dev/vulnerability/USN-5628-1
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
security-tracker	www.security-tracker.debian.org/tracker/CVE-2020-15113
osv	www.osv.dev/vulnerability/CVE-2020-15113
errata	www.errata.altlinux.org/ALT-PU-2022-1247
osv	www.osv.dev/vulnerability/UBUNTU-CVE-2020-15113

06 Mar 2024 00:00Current

7.1High risk

Vulners AI Score7.1

CVSS 3.17.1 - 7.7

CVSS 25.8

EPSS0.00413