Cloudanix VulnDB

CVE-2021-28235

Critical · 9.8

CVSS

9.8

EPSS

1.6%

Published

Apr 4, 2023

CISA due date

—

Cloudanix analysis

Monitor only SSVC: Track

There is not enough information about this issue to understand what it affects or how serious it might be.

Exploitation
Other
Attacker needs
None
Complexity
Other
Impact
Full Compromise
Component
Other
Class
Other
Remediation
Other
Effort
Other
Patch risk
Other

What it actually does

Insufficient information available to determine the technical impact of the vulnerability.

Why it matters to the business

Unknown operational consequences due to missing details on affected products and scope.

How an attack unfolds

No exploitation details can be derived from the provided CVE information.

How to fix it

Apply any available patches or updates once identified for the affected components.

How to confirm the fix worked

Monitor vendor advisories and confirm updates when product information becomes available.

How to detect it

No specific log sources or artifacts can be identified without a description or product details.

What your security team should do

  • Track the CVE for updates on affected products and fixed versions.
  • Prioritize based on EPSS and KEV status once details emerge.

The record

Authentication vulnerability found in Etcd-io v.3.4.10 allows remote attackers to escalate privileges via the debug function.

Affected packages

Ecosystem Package Introduced Fixed
Go go.etcd.io/etcd/v3 3.4.10 No fix
Bitnami etcd 3.4.10 No fix
Bitnami etcd 3.4.10 3.4.11
Debian:11 etcd 0 No fix
Debian:12 etcd 0 No fix
Debian:13 etcd 0 3.4.30-1
Debian:14 etcd 0 3.4.30-1
Red Hat:openstack:16.1::el8 etcd 0 0:3.3.23-14.el8ost
Red Hat:openstack:16.1::el8 etcd-debuginfo 0 0:3.3.23-14.el8ost
Red Hat:openstack:16.1::el8 etcd-debugsource 0 0:3.3.23-14.el8ost
Red Hat:openstack:16.2::el8 etcd 0 0:3.3.23-14.el8ost
Red Hat:openstack:16.2::el8 etcd-debuginfo 0 0:3.3.23-14.el8ost
Red Hat:openstack:16.2::el8 etcd-debugsource 0 0:3.3.23-14.el8ost
Red Hat:openstack:17.0::el9 etcd 0 0:3.4.26-1.el9ost
Red Hat:openstack:17.0::el9 etcd-debuginfo 0 0:3.4.26-1.el9ost
Red Hat:openstack:17.0::el9 etcd-debugsource 0 0:3.4.26-1.el9ost
SUSE:Package Hub 15 SP6 etcd 0 3.5.12-bp156.4.3.1
Ubuntu:16.04:LTS etcd 0 No fix
Ubuntu:20.04:LTS etcd 0 No fix
Ubuntu:22.04:LTS etcd 0 No fix
Ubuntu:24.04:LTS etcd 0 No fix
Ubuntu:24.10 etcd 0 No fix
Ubuntu:25.04 etcd 0 No fix
Ubuntu:25.10 etcd 0 No fix
Ubuntu:Pro:16.04:LTS etcd 0 No fix
Ubuntu:Pro:18.04:LTS etcd 0 3.2.17+dfsg-1ubuntu0.1+esm2
Ubuntu:Pro:20.04:LTS etcd 0 3.2.26+dfsg-6ubuntu0.2+esm1
Ubuntu:Pro:22.04:LTS etcd 0 3.3.25+dfsg-7ubuntu0.22.04.1+esm1
Ubuntu:Pro:24.04:LTS etcd 0 No fix
go go.etcd.io/etcd/v3 3.4.10 No fix
openSUSE:Leap 15.5 etcd 0 3.5.12-150000.7.6.1
openSUSE:Leap 15.6 etcd 0 3.5.12-150000.7.6.1
openSUSE:Leap 15.6 etcd 0 3.5.12-bp156.4.3.1
openSUSE:Tumbleweed etcd 0 3.5.8-1.1
openSUSE:Tumbleweed etcd-for-k8s1.25 0 3.5.9-1.1
openSUSE:Tumbleweed etcd-for-k8s1.26 0 3.5.9-1.1
openSUSE:Tumbleweed etcd-for-k8s1.27 0 3.5.9-1.1

Related vulnerabilities