/
DirectorySecurity AdvisoriesPricing
Sign in
Security Advisories

CVE-2020-15113

Published

Last updated

NVD

https://nvd.nist.gov/vuln/detail/CVE-2020-15113

Severity

7.1

High

CVSS V3

Description

In etcd before versions 3.3.23 and 3.4.10, certain directory paths are created (etcd data directory and the directory path when provided to automatically generate self-signed certificates for TLS connections with clients) with restricted access permissions (700) by using the os.MkdirAll. This function does not perform any permission checks when a given directory path exists already. A possible workaround is to ensure the directories have the desired permission (700).

References

  • https://images.chainguard.dev/security/CGA-725w-5575-6pc3

Affected packages


Safe Source for Open Sourceâ„¢
Contact us
© 2025 Chainguard. All Rights Reserved.
Private PolicyTerms of Use

Product

Chainguard ContainersChainguard LibrariesChainguard VMsIntegrationsPricing