Privilege Escalation

2023-04-1712:06:26

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

vulnerability

etcd-io

etcd

privilege escalation

authentication

debug

software

0.003 Low

EPSS

Percentile

71.5%

JSON

github.com/etcd-io/etcd is vulnerable to Privilege Escalation. The vulnerability exists due to improper authentication in v3_server.go which allows an attacker to gain escalated privilege when the log level is set to debug.

CPENameOperatorVersion
github.com/etcd-io/etcdlev3.4.23
github.com/etcd-io/etcdlev3.5.7
github.com/etcd-io/etcdlev3.4.23
github.com/etcd-io/etcdlev3.5.7
etcdeq3.4.14__2.el9ost
etcdeq3.3.23__1.el8ost
etcdeq3.3.23__12.el8ost
etcdeq3.3.23__7.el8ost
etcdeq3.2.21__2.el8ost
etcdeq3.2.21__2.el8

Name	Operator	Version
github.com/etcd-io/etcd	le	v3.4.23
github.com/etcd-io/etcd	le	v3.5.7
github.com/etcd-io/etcd	le	v3.4.23
github.com/etcd-io/etcd	le	v3.5.7
etcd	eq	3.4.14__2.el9ost
etcd	eq	3.3.23__1.el8ost
etcd	eq	3.3.23__12.el8ost
etcd	eq	3.3.23__7.el8ost
etcd	eq	3.2.21__2.el8ost
etcd	eq	3.2.21__2.el8