Etcd (Redhat) - vulnerabilities (CVEs)

5 CVEs, 0 in the last 30 days, 158 known versions, newest CVE from 2020-08-06. Vendor: Redhat.

CVEs of Etcd

• CVE-2020-15136 - CVSS 6.5 (medium), 2020-08-06: In ectd before versions 3.4.10 and 3.3.23, gateway TLS authentication is only applied to endpoints detected in DNS SRV records. When starting a gateway, TLS…
• CVE-2020-15114 - CVSS 7.7 (high), 2020-08-06: In etcd before versions 3.3.23 and 3.4.10, the etcd gateway is a simple TCP proxy to allow for basic service discovery and access. However, it is possible to…
• CVE-2020-15115 - CVSS 7.5 (high), 2020-08-06: etcd before versions 3.3.23 and 3.4.10 does not perform any password length validation, which allows for very short passwords, such as those with a length of…
• CVE-2018-1099 - CVSS 5.5 (medium), 2018-04-03: DNS rebinding vulnerability found in etcd 3.3.1 and earlier. An attacker can control his DNS records to direct to localhost, and trick the browser into…
• CVE-2018-1098 - CVSS 8.8 (high), 2018-04-03: A cross-site request forgery flaw was found in etcd 3.3.1 and earlier. An attacker can set up a website that tries to send a POST request to the etcd server…