Insecure Permission Checks

🗓️ 06 Aug 2020 06:08:41Reported by Veracode Vulnerability DatabaseType

veracode🔗 sca.analysiscenter.veracode.com👁 29 Views

github.com/etcd-io/etcd insecure permission checks directory creatio

Reporter	Title	Published	Views	Family All 72
IBM Security Bulletins	Security Bulletin: IBM API Connect is vulnerable to denial of service (DoS) via etcd (CVE-2020-15106 CVE-2020-15112 CVE-2020-15113)	2 Feb 202113:37	–	ibm
IBM Security Bulletins	Security Bulletin: IBM MQ Operator and Queue manager container images are vulnerable to multiple vulnerabilities from systemd, libcap, openssl-libs, libxml2, go-toolset, and prometheus-operator	28 Aug 202308:17	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities affect IBM® Db2® On Openshift and IBM® Db2® and Db2 Warehouse® on Cloud Pak for Data	29 Jun 202217:05	–	ibm
IBM Security Bulletins	Security Bulletin: IBM CICS TX Standard is vulnerable to multiple vulnerabilities in Golang Go.	14 Feb 202321:14	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in go.etcd.io/etcd package affects IBM Watson Machine Learning Accelerator on Cloud Pak for Data	6 Dec 202316:17	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Private is vulnerable to etcd vulnerabilities (CVE-2020-15106, CVE-2020-15112, CVE-2020-15113)	26 Feb 202114:21	–	ibm
IBM Security Bulletins	Security Bulletin: IBM CICS TX Advanced is vulnerable to multiple vulnerabilities in Golang Go.	14 Feb 202321:04	–	ibm
IBM Security Bulletins	Security Bulletin: Open Source Dependency Vulnerability	15 May 202318:36	–	ibm
ALT Linux	Security fix for the ALT Linux 10 package etcd version 3.4.13-alt1	5 Sep 202000:00	–	altlinux
ATTACKERKB	CVE-2020-15113	5 Aug 202020:15	–	attackerkb

Vulners

Node

etcd-io github.com/etcd-io/etcdRange3.4.0-rc.0–3.4.9go

etcd-io github.com/etcd-io/etcdRange2.3.0-alpha.1–3.3.22go

etcd etcdMatch3.2.21_2.el8ost

etcd etcdMatch3.2.21_2.el8

Source	Link
github	www.github.com/etcd-io/etcd/pull/12081
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/L6B6R43Y7M3DCHWK3L3UVGE2K6WWECMP/
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/L6B6R43Y7M3DCHWK3L3UVGE2K6WWECMP/
github	www.github.com/etcd-io/etcd/security/advisories/GHSA-chh6-ppwq-jh92

07 Nov 2023 23:23Current

3.6Low risk

Vulners AI Score3.6

CVSS 3.15.7 - 7.1

CVSS 23.6

EPSS0.00024