CRITICAL9.8CVE-2021-28235Etcd-io Improper Authentication vulnerability from 0, < 3.4.42, >= 3.5.0-alpha.0, < 3.5.28, >= 3.6.0-alpha.0, < 3.6.9
>= 3.6.0-alpha.0, < 3.6.9
HIGH8.8etcd Cross-site Request Forgery (CSRF)
from 0, < 3.4.0
HIGH8.1Authentication bypass in go.etcd.io/etcd
>= 3.2.0, < 3.2.26
MEDIUM5.3Improper Input Validation in etcd
from 0, < 3.3.23
NONE0.0etcd: Read access via PrevKv in etcd transactions may bypass RBAC authorization checks
>= 3.6.0, < 3.6.11
NONE0.0etcd: Nested etcd transactions bypass RBAC authorization checks
>= 3.6.0-alpha.0, < 3.6.9
NONE0.0etcd: Nested etcd transactions bypass RBAC authorization checks
from 0, < 3.4.42, >= 3.5.0-alpha.0, < 3.5.28, >= 3.6.0-alpha.0, < 3.6.9