← All advisories

Critical severity9.8NVD Advisory· Published Apr 4, 2023· Updated Jul 5, 2026

CVE-2021-28235

CVE-2021-28235

Description

Authentication vulnerability found in Etcd-io v.3.4.10 allows remote attackers to escalate privileges via the debug function.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

10

Etcd Io/Etcdcpe-rescue
osv-coords9 versions
pkg:bitnami/etcd pkg:golang/go.etcd.io/etcd/v3 pkg:rpm/opensuse/etcd&distro=openSUSE%20Leap%2015.5 pkg:rpm/opensuse/etcd&distro=openSUSE%20Leap%2015.6 pkg:rpm/opensuse/etcd&distro=openSUSE%20Tumbleweed pkg:rpm/opensuse/etcd-for-k8s1.25&distro=openSUSE%20Tumbleweed pkg:rpm/opensuse/etcd-for-k8s1.26&distro=openSUSE%20Tumbleweed pkg:rpm/opensuse/etcd-for-k8s1.27&distro=openSUSE%20Tumbleweed pkg:rpm/suse/etcd&distro=SUSE%20Package%20Hub%2015%20SP6
>= 3.4.10, < 3.4.11+ 8 more
- (no CPE)range: >= 3.4.10, < 3.4.11
- (no CPE)
- (no CPE)range: < 3.5.12-150000.7.6.1
- (no CPE)range: < 3.5.12-150000.7.6.1
- (no CPE)range: < 3.5.8-1.1
- (no CPE)range: < 3.5.9-1.1
- (no CPE)range: < 3.5.9-1.1
- (no CPE)range: < 3.5.9-1.1
- (no CPE)range: < 3.5.12-bp156.4.3.1

Patches

Vulnerability mechanics

References

6

github.com/advisories/GHSA-gmph-wf7j-9gcmghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2021-28235ghsaADVISORY
etcd.comnvdBroken LinkWEB
github.com/etcd-io/etcd/pull/15648nvdWEB
github.com/lucyxss/etcd-3.4.10-test/blob/master/temp4cj.pngnvdProductWEB
github.com/lucyxss/etcd-3.4.10-test/blob/master/temp4cj_2.pngnvdProductWEB

News mentions

0

No linked articles in our index yet.