TI-2020-11909 CVE-2020-15136 · GHSA-wr2v-9rpq-c35q
Improper authentication in etcd
Priority LOW 32
In ectd before versions 3.4.10 and 3.3.23, gateway TLS authentication is only applied to endpoints detected in DNS SRV records.
Vulnerabilities
6 records
TI-2020-11889 CVE-2020-15114 · GHSA-2xhq-gv6c-p224
Denial of Service in etcd
Priority LOW 36
In etcd before versions 3.3.23 and 3.4.10, the etcd gateway is a simple TCP proxy to allow for basic service discovery and access.
TI-2020-11890 CVE-2020-15115 · GHSA-4993-m7g5-r9hh
No minimum password length in etcd
Priority LOW 36
etcd before versions 3.3.23 and 3.4.10 does not perform any password length validation, which allows for very short passwords, such as those with a length of one.
TI-2020-11887 CVE-2020-15112 · GHSA-m332-53r6-2w93
Improper Input Validation in etcd
Priority LOW 31
In etcd before versions 3.3.23 and 3.4.10, it is possible to have an entry index greater then the number of entries in the ReadAll method in wal/wal.go.
TI-2020-11888 CVE-2020-15113 · GHSA-chh6-ppwq-jh92
Improper Preservation of Permissions in etcd
Priority LOW 31
In etcd before versions 3.3.23 and 3.4.10, certain directory paths are created (etcd data directory and the directory path when provided to automatically generate self-signed certificates for TLS connections with clients…
TI-2020-11881 CVE-2020-15106 · GHSA-p4g4-wgrh-qrg2
Improper Input Validation in etcd
Priority LOW 31
In etcd before versions 3.3.23 and 3.4.10, a large slice causes panic in decodeRecord method.