Red Hat Security Advisory

RHSA-2019:1352

etcd security, bug fix, and enhancement update

Released 2019-06-04 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux 7 Extras etcd-3.2.26-1.el7

Fixes 1 record

TI-2018-12096 CVE-2018-16886 · GHSA-h6xx-pmxh-3wgp

Improper authentication in etcd:

MEDIUM 42

etcd versions 3.2.x before 3.2.26 and 3.3.x before 3.3.11 are vulnerable to an improper authentication issue when role-based access control (RBAC) is used and client-cert-auth is enabled.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.04064 Published 2019-01-14 Partial fix · 3.2.26, 3.3.11 +1 CWE-287