https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 02:35:39 +0000 https://cve.radiocsirt.org/vuln/bdu:2019-02944 bdu:2019-02944 https://cve.radiocsirt.org/vuln/bdu:2019-02944 https://cve.radiocsirt.org/vuln/certfr-2022-avi-591 certfr-2022-avi-591 https://cve.radiocsirt.org/vuln/certfr-2022-avi-591 https://cve.radiocsirt.org/vuln/euvd-2026-68396 EUVD-2026-68396 https://cve.radiocsirt.org/vuln/euvd-2026-68396 https://cve.radiocsirt.org/vuln/fkie_cve-2018-16886 <p>etcd versions 3.2.x before 3.2.26 and 3.3.x before 3.3.11 are vulnerable to an improper authentication issue when role-based access control (RBAC) is used and client-cert-auth is enabled. If an etcd client server TLS certificate contains a Common Name (CN) which matches a valid RBAC username, a remote attacker may authenticate as that user with any valid (trusted) client certificate in a REST API request to the gRPC-gateway.</p> <p>etcd versions 3.2.x before 3.2.26 and 3.3.x before 3.3.11 are vulnerable to an improper authentication issue when role-based access control (RBAC) is used and client-cert-auth is enabled. If an etcd client server TLS certificate contains a Common Name (CN) which matches a valid RBAC username, a remote attacker may authenticate as that user with any valid (trusted) client certificate in a REST API request to the gRPC-gateway.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2018-16886 https://cve.radiocsirt.org/vuln/ghsa-h6xx-pmxh-3wgp <p><strong>Affected:</strong> Go: go.etcd.io/etcd/v3, Go: go.etcd.io/etcd</p> <p>etcd versions 3.2.x before 3.2.26 and 3.3.x before 3.3.11 are vulnerable to an improper authentication issue when role-based access control (RBAC) is used and client-cert-auth is enabled. If an etcd client server TLS certificate contains a Common Name (CN) which matches a valid RBAC username, a remote attacker may authenticate as that user with any valid (trusted) client certificate in a REST API request to the gRPC-gateway.</p> <p><strong>Affected:</strong> Go: go.etcd.io/etcd/v3, Go: go.etcd.io/etcd</p> <p>etcd versions 3.2.x before 3.2.26 and 3.3.x before 3.3.11 are vulnerable to an improper authentication issue when role-based access control (RBAC) is used and client-cert-auth is enabled. If an etcd client server TLS certificate contains a Common Name (CN) which matches a valid RBAC username, a remote attacker may authenticate as that user with any valid (trusted) client certificate in a REST API request to the gRPC-gateway.</p> https://cve.radiocsirt.org/vuln/ghsa-h6xx-pmxh-3wgp https://cve.radiocsirt.org/vuln/gsd-2018-16886 gsd-2018-16886 https://cve.radiocsirt.org/vuln/gsd-2018-16886 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10741-1 <p>etcd-3.4.16-3.1 on GA media</p> <p>etcd-3.4.16-3.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:10741-1 https://cve.radiocsirt.org/vuln/rhsa-2019:1352 <p>etcd: Improper Authentication in auth/store.go:AuthInfoFromTLS() via gRPC-gateway</p> <p>etcd: Improper Authentication in auth/store.go:AuthInfoFromTLS() via gRPC-gateway</p> https://cve.radiocsirt.org/vuln/rhsa-2019:1352 https://cve.radiocsirt.org/vuln/suse-su-2024:3656-1 <p>Security update for etcd</p> <p>Security update for etcd</p> https://cve.radiocsirt.org/vuln/suse-su-2024:3656-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2018-16886 <p><strong>Affected:</strong> Ubuntu:Pro:18.04:LTS: etcd</p> <p>etcd versions 3.2.x before 3.2.26 and 3.3.x before 3.3.11 are vulnerable to an improper authentication issue when role-based access control (RBAC) is used and client-cert-auth is enabled. If an etcd client server TLS certificate contains a Common Name (CN) which matches a valid RBAC username, a remote attacker may authenticate as that user with any valid (trusted) client certificate in a REST API request to the gRPC-gateway.</p> <p><strong>Affected:</strong> Ubuntu:Pro:18.04:LTS: etcd</p> <p>etcd versions 3.2.x before 3.2.26 and 3.3.x before 3.3.11 are vulnerable to an improper authentication issue when role-based access control (RBAC) is used and client-cert-auth is enabled. If an etcd client server TLS certificate contains a Common Name (CN) which matches a valid RBAC username, a remote attacker may authenticate as that user with any valid (trusted) client certificate in a REST API request to the gRPC-gateway.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2018-16886 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0510 <p>Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann mehrere Schwachstellen in IBM DB2 ausnutzen, um Dateien zu manipulieren, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszulösen, willkürlichen Code mit erhöhten Rechten auszuführen, Informationen falsch darzustellen und beliebigen Code auszuführen.</p> <p>Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann mehrere Schwachstellen in IBM DB2 ausnutzen, um Dateien zu manipulieren, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszulösen, willkürlichen Code mit erhöhten Rechten auszuführen, Informationen falsch darzustellen und beliebigen Code auszuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0510