GO-2021-0077

Dashboard / Vulnerabilities / GO-2021-0077

GO-2021-0077

Summary: Authentication bypass in go.etcd.io/etcd

Details: A user can use a valid client certificate that contains a CommonName that matches a valid RBAC username to authenticate themselves as that user, despite lacking the required credentials. This may allow authentication bypass, but requires a certificate that is issued by a CA trusted by the server.

References: https://github.com/etcd-io/etcd/pull/10366, https://github.com/etcd-io/etcd/commit/bf9d0d8291dc71ecbfb2690612954e1a298154b2