Lucene search

K
cveMitreCVE-2021-28235
HistoryApr 04, 2023 - 3:15 p.m.

CVE-2021-28235

2023-04-0415:15:08
CWE-287
mitre
web.nvd.nist.gov
52
cve-2021-28235
etcd-io
authentication vulnerability
remote attack
privilege escalation
debug function

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.3

Confidence

High

EPSS

0.004

Percentile

75.6%

Authentication vulnerability found in Etcd-io v.3.4.10 allows remote attackers to escalate privileges via the debug function.

Affected configurations

Nvd
Node
etcdetcdMatch3.4.10
VendorProductVersionCPE
etcdetcd3.4.10cpe:2.3:a:etcd:etcd:3.4.10:*:*:*:*:*:*:*

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.3

Confidence

High

EPSS

0.004

Percentile

75.6%