RHSA-2024:3352 Red Hat Security Advisory: Red Hat OpenStack Platform 16.2 (etcd) security update

Bulletin has no description...

RHSA-2024:2729 Red Hat Security Advisory: Red Hat OpenStack Platform 17.1 (etcd) security update

Bulletin has no description...

RHSA-2023:1275 Red Hat Security Advisory: Red Hat OpenStack Platform (etcd) security update

Bulletin has no description...

RHSA-2023:1014 Red Hat Security Advisory: Red Hat OpenStack Platform 17.0 (etcd) security update

Bulletin has no description...

RHSA-2022:6066 Red Hat Security Advisory: Red Hat OpenStack Platform 16.1 (etcd) security update

Bulletin has no description...

RHSA-2022:6061 Red Hat Security Advisory: Red Hat OpenStack Platform 16.2 (etcd) security update

Bulletin has no description...

RHSA-2022:0260 Red Hat Security Advisory: Red Hat OpenStack Platform 16.1 (etcd) security update

Bulletin has no description...

RHSA-2022:0237 Red Hat Security Advisory: Red Hat OpenStack Platform 16.2 (etcd) security update

Bulletin has no description...

RHSA-2021:5072 Red Hat Security Advisory: Red Hat OpenStack Platform 16.1 (etcd) security update

Bulletin has no description...

RHSA-2021:3487 Red Hat Security Advisory: Red Hat OpenStack Platform 16.2 (etcd) security update

Bulletin has no description...

openSUSE 15 Security Update : coredns (openSUSE-SU-2024:0319-1)

The remote openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2024:0319-1 advisory. Update to version 1.11.3: optimize the performance for high qps 6767 bump deps Fix zone parser error handling 6680 Add alternate option to forwar...

RHSA-2023:3441 Red Hat Security Advisory: Red Hat OpenStack Platform 17.0 (etcd) security update

Bulletin has no description...

RHSA-2021:1407 Red Hat Security Advisory: etcd security update

Bulletin has no description...

RHSA-2021:0916 Red Hat Security Advisory: Red Hat OpenStack Platform 16.1.4 (etcd) security update

Bulletin has no description...

RHSA-2019:1352 Red Hat Security Advisory: etcd security, bug fix, and enhancement update

Bulletin has no description...

Etcd Keys API Information Gathering

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Etcd Keys API Information Gathering', 'Description' = %q This module queries the etcd API to recursively retrieve all of the stored key value...

GO-2023-1653 `cilium-cli` disables etcd authorization for clustermesh clusters in github.com/cilium/cilium-cli

cilium-cli disables etcd authorization for clustermesh clusters in github.com/cilium/cilium-cli...

GO-2024-3063 RBAC Roles for `etcd` created by Kamaji are not disjunct in github.com/clastix/kamaji

RBAC Roles for etcd created by Kamaji are not disjunct in github.com/clastix/kamaji...

Improper Access Control

github.com/clastix/kamaji is vulnerable to Improper Access Control. The vulnerability is due to inadequate use of an "open at the top" range definition in RBAC for etcd roles, which allows some TCPs API servers to read, write, and delete data of other control planes...

GHSA-6R4J-4RJC-8VW5 RBAC Roles for `etcd` created by Kamaji are not disjunct

Summary Using an "open at the top" range definition in RBAC for etcd roles leads to some TCPs API servers being able to read, write and delete the data of other control planes. Details The problematic code is this:...