CVE-2018-16886 — Vulnetix

Try Vulnetix Request Demo

CVE-2018-16886 PUBLISHED

etcd versions 3.2.x before 3.2.26 and 3.3.x before 3.3.11 are vulnerable to an improper authentication issue when role-based access control (RBAC) is used and client-cert-auth is enabled. If an etcd client server TLS certificate contains a Common Name (CN) which matches a valid RBAC username, a remote attacker may authenticate as that user with any valid (trusted) client certificate in a REST API request to the gRPC-gateway.

EPSS 0.76% · 73.1th percentile

Risk Scores

EPSS Score

0.76%

73.1th percentile

Affected Products

Vendor	Product	Versions
Ubuntu:Pro:18.04:LTS	etcd	0, 3.1.0-1, 3.2.9+dfsg-2

Timeline

Jan 14, 2019 CVE Published
Apr 14, 2021 EPSS Score
Jun 22, 2021 EPSS Score
Aug 23, 2021 EPSS Score
Dec 25, 2021 EPSS Score
Feb 4, 2022 EPSS Score
Feb 25, 2022 EPSS Score
Apr 28, 2022 EPSS Score
Aug 31, 2022 EPSS Score
Nov 1, 2022 EPSS Score
Jan 2, 2023 EPSS Score
Mar 5, 2023 EPSS Score

References

https://ubuntu.com/security/CVE-2018-16886 third-party-advisory
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-16886 third-party-advisory
https://github.com/etcd-io/etcd/pull/10366 third-party-advisory
https://github.com/etcd-io/etcd/commit/bf9d0d8291dc71ecbfb2690612954e1a298154b2 third-party-advisory
https://github.com/etcd-io/etcd/commit/a9a9466fb8ba11ad7bb6a44d7446fbd072d59887 third-party-advisory
https://github.com/etcd-io/etcd/commit/99704e2a97e8710da942bdc737417fc9c9a2c03f third-party-advisory
https://github.com/etcd-io/etcd/commit/83c051b701d33261eef91a719e4421c81b000ba4 third-party-advisory
https://github.com/etcd-io/etcd/pull/10386 third-party-advisory
https://www.cve.org/CVERecord?id=CVE-2018-16886 third-party-advisory

Open in Interactive Console →