CVE-2021-28235

Description

Authentication vulnerability found in Etcd-io v.3.4.10 allows remote attackers to escalate privileges via the debug function.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

References

• https://github.com/etcd-io/etcd ↗
• https://github.com/lucyxss/etcd-3.4.10-test/blob/master/temp4cj.png ↗
• https://github.com/lucyxss/etcd-3.4.10-test/blob/master/temp4cj_2.png ↗
• https://github.com/etcd-io/etcd/pull/15648 ↗