WS-2022-0329

etcd vulnerable to TOCTOU of gateway endpoint authentication...

Time-of-check To Time-of-Use (TOCTOU)

go.etcd.io/etcd/v3 is vulnerable to time-of-check to time-of-use. The vulnerability exists because the startGateway function of gateway.go does not properly handle gateway endpoint validations, allowing an attacker to bypass the authentication mechanism...