PT-2022-28196 · Etcd · Etcd

Published 2022-10-06 · Updated 2022-10-06

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions etcd (affected versions not specified)

Description The issue concerns data exposure due to the storage of user credentials in WAL entries on each user authentication. If the WAL log files are not secure, it can potentially expose sensitive information, including login and password details. The etcd server does not encrypt key/value data stored on disk drives, relying on the security of the on-disk files.

Recommendations To mitigate this issue, ensure that the etcd server WAL log files are secure, as the security of these files is the responsibility of the etcd users. Consider implementing additional security measures to protect the WAL log files and sensitive information stored within. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-256

Related Identifiers

GHSA-528J-9R78-WFFX

Affected Products

Etcd

References · 8

• https://osv.dev/vulnerability/GHSA-528j-9r78-wffx · Vendor Advisory
• https://github.com/etcd-io/etcd · Note
• https://github.com/etcd-io/etcd/issues/10132 · Note
• https://github.com/etcd-io/etcd/pull/11818 · Note
• https://github.com/etcd-io/etcd/blob/master/security/SECURITY_AUDIT.pdf · Note
• https://github.com/etcd-io/etcd/blob/master/Documentation/op-guide/security.md#does-etcd-encrypt-data-stored-on-disk-drives · Note
• https://github.com/etcd-io/etcd/commit/585814082b8c8b7db272b30b365b81d27df4a4cb · Note
• https://github.com/etcd-io/etcd/security/advisories/GHSA-528j-9r78-wffx · Note