Improper Authentication in etcd - CVE-2020-15136
Published: August 11, 2020
Vulnerability identifier: #VU42731
CSH Severity: Medium
CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2020-15136
CWE-ID: CWE-287
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to bypass authentication process.
The vulnerability exists due to gateway TLS authentication is only applied to endpoints detected in DNS SRV records. When starting a gateway, TLS authentication will only be attempted on endpoints identified in DNS SRV records for a given domain, which occurs in the discoverEndpoints function. No authentication is performed against endpoints provided in the --endpoints flag.
Affected software
etcd
Red Hat OpenStack
Red Hat OpenStack for IBM Power
Fedora
etcd (Red Hat package)
etcd
Red Hat OpenStack
Red Hat OpenStack for IBM Power
Fedora
etcd (Red Hat package)
etcd
How to mitigate CVE-2020-15136
Install updates from vendor's website.
etcd - addressed in versions 3.3.23, 3.4.10
etcd (Red Hat package) - update to 3.3.23-1.el8ost
etcd - update to 3.4.13-1.fc32
etcd (Red Hat package) - update to 3.3.23-1.el8ost
etcd - update to 3.4.13-1.fc32