CVE:CVE-2018-16886
CNNVD:CNNVD-201901-450
etcd是一套使用Go语言编写的用于分布式系统的键值存储系统。
etcd 3.2.26之前的3.2.x版本和3.3.11之前的3.3.x版本中存在授权问题漏洞。远程攻击者可借助有效的客户端证书利用该漏洞以用户身份进行身份验证。
solution:Upgrade etcd etcd to a higher version than 3.2.26,3.3.11,and avoid the version [3.2.0,3.2.26),[3.3.0,3.3.11); Upgrade redhat enterprise_linux_desktop to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat enterprise_linux_server to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat enterprise_linux_workstation to a higher version than 7.0,and avoid the version 7.0; Upgrade fedoraproject fedora to a higher version than 30,and avoid the version 30