Information Disclosure

🗓️ 17 May 2023 05:21:49Reported by Veracode Vulnerability DatabaseType

github.com/etcd-io/etcd Information Disclosur

Reporter	Title	Published	Views	Family All 61
CBLMariner	CVE-2023-32082 affecting package etcd for versions less than 3.5.3-10	14 Feb 202320:24	–	cbl_mariner
Circl	CVE-2023-32082	12 May 202300:15	–	circl
CNNVD	etcd 信息泄露漏洞	11 May 202300:00	–	cnnvd
CVE	CVE-2023-32082	11 May 202319:22	–	cve
Cvelist	CVE-2023-32082 etcd key name can be accessed via LeaseTimeToLive API	11 May 202319:22	–	cvelist
Debian CVE	CVE-2023-32082	11 May 202319:22	–	debiancve
EUVD	EUVD-2023-1459	3 Oct 202520:07	–	euvd
Github Security Blog	etcd Key name can be accessed via LeaseTimeToLive API	12 May 202320:19	–	github
Microsoft CVE	etcd key name can be accessed via LeaseTimeToLive API	15 May 202307:00	–	mscve
NVD	CVE-2023-32082	11 May 202320:15	–	nvd

Vulners

Node

etcd etcdMatch3.3.25+dfsg-6debian

AND

etcd-io github.com/etcd-io/etcdRangev3.1.0-alpha.0–3.1.0-alpha.0go

etcd-io github.com/etcd-io/etcdRangev3.5.0-alpha.0–3.5.0-alpha.0go

etcd etcdMatch3.2.18_1.el7

etcd etcdMatch3.3.23_9.el7rhgs

etcd etcdMatch3.4.14_3.el9ost

etcd etcdMatch3.2.32_1.el7_9

etcd etcdMatch3.2.15_2.el7

etcd etcdMatch3.3.11_2.el7.centos

etcd etcdMatch3.4.14_2.el9ost

etcd etcdMatch3.2.15_1.el7

etcd etcdMatch3.2.22_1.el7

etcd etcdMatch3.2.28_1.el7_8

etcd etcdMatch3.2.26_1.el7.centos

etcd etcdMatch3.2.7_1.el7

Source	Link
github	www.github.com/etcd-io/etcd/pull/15656
github	www.github.com/etcd-io/etcd/commit/71e85e9ded040de758dfefaa641621d152d85248
github	www.github.com/etcd-io/etcd/commit/d1b1aa9dbe8065fb2cb36fe035daf701ccabc4e0
github	www.github.com/advisories/GHSA-3p4g-rcw5-8298
github	www.github.com/etcd-io/etcd/blob/main/CHANGELOG/CHANGELOG-3.4.md
github	www.github.com/etcd-io/etcd/blob/main/CHANGELOG/CHANGELOG-3.5.md
github	www.github.com/etcd-io/etcd/security/advisories/GHSA-3p4g-rcw5-8298

22 May 2023 22:05Current

6.6Medium risk

Vulners AI Score6.6

CVSS 3.13.1 - 4.3

EPSS0.0036

SSVC