Vulnerability · Published Aug 6, 2020 · Assigned by GitHub_M

CVE-2020-15136Improper authentication in etcd

Medium 6.5

In plain English

A medium-severity improper authentication in etcd from etcd-io. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.7% (higher than 77% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)6.5Medium

Exploit odds (30 days)1.7%top 23.4% of all CVEs

Exploited in the wildNo reportsnot in CISA KEV

Attack toolingNoneno public tooling known

Official description

In ectd before versions 3.4.10 and 3.3.23, gateway TLS authentication is only applied to endpoints detected in DNS SRV records. When starting a gateway, TLS authentication will only be attempted on endpoints identified in DNS SRV records for a given domain, which occurs in the discoverEndpoints function. No authentication is performed against endpoints provided in the --endpoints flag. This has been fixed in versions 3.4.10 and 3.3.23 with improved documentation and deprecation of the functionality.

Affected packages & fixed versions

Ecosystem	Package	Fixed in	Advisory
Debian:12	etcd	3.3.25+dfsg-5	DEBIAN-CVE-2020-15136
Debian:13	etcd	3.3.25+dfsg-5	DEBIAN-CVE-2020-15136
Debian:14	etcd	3.3.25+dfsg-5	DEBIAN-CVE-2020-15136
Go	go.etcd.io/etcd	3.3.23	GHSA-wr2v-9rpq-c35q
Go	go.etcd.io/etcd	3.4.10	GHSA-wr2v-9rpq-c35q
Ubuntu:25.10	etcd	no fix listed	UBUNTU-CVE-2020-15136
Ubuntu:26.10	etcd	no fix listed	UBUNTU-CVE-2020-15136

Affected products (as reported)

Vendor	Product	Versions
etcd-io	etcd	>= 3.4.0, < 3.4.10< 3.3.23

Weakness: CWE-287 · Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N

References

https://github.com/etcd-io/etcd/security/advisories/GHSA-wr2v-9rpq-c35q x_refsource_CONFIRM
https://github.com/etcd-io/etcd/blob/master/Documentation/op-guide/gateway.md x_refsource_MISC
FEDORA-2020-cd43b84c16 vendor-advisory, x_refsource_FEDORA