Executive brief
Etcd-io Improper Authentication vulnerability
Affected products
- Go go.etcd.io/etcd/v3
Junglewise Threat Intelligence
CVE-2021-28235: Etcd-io Improper Authentication vulnerability
CVE-2021-28235 · Severity: low · CVSS 3.1 · Published 2023-04-04
Technologies: go.etcd.io/etcd/v3 (Go). Vendors: Go.
Related threats
- GO-2026-4808 - Nested etcd transactions bypass RBAC authorization checks in go.etcd.io/etcd
- GO-2026-4806 - Authorization bypasses in multiple APIs in go.etcd.io/etcd
- GO-2024-2528 - Etcd Gateway TLS endpoint validation only confirms TCP reachability in go.etcd.io/etcd
- GO-2024-2530 - Etcd auth Inaccurate logging of authentication attempts for users with CN-based auth only in go.etcd.io/etcd
- GO-2024-2529 - Etcd embed auto compaction retention negative value causing a compaction loop or a crash in go.etcd.io/etcd