You are viewing a plain text version of this content. The canonical link for it is here.
Posted to notifications@apisix.apache.org by GitBox <gi...@apache.org> on 2022/06/27 04:03:47 UTC
[GitHub] [apisix] kingmouse-yx opened a new issue, #7330: help request: How to handle ETCD REST API unauthorized access vulnerability？
kingmouse-yx opened a new issue, #7330:
URL: https://github.com/apache/apisix/issues/7330
### Description
At present, in the test environment, the security team has found a high-risk vulnerability: ETCD REST API unauthorized access vulnerability.
I'd like to ask what remedial measures are available for this apifix? In other words, will my basic authentication (role-based access control) of ETCD affect the functions of apisix? How should I deal with this vulnerability?
### Environment
- pisix version (cmd: apisix version): 2.13.0-alpine
- S (cmd: uname -a): Darwin kingmouse.local 21.4.0 Darwin Kernel Version 21.4.0: Mon Feb 21 20:36:53 PST 2022; root:xnu-8020.101.4~2/RELEASE_ARM64_T8101 arm64
- penResty / Nginx version (cmd: nginx -V or openresty -V): openresty/1.19.3.1
- tcd version, if have (cmd: run curl http://127.0.0.1:9090/v1/server_info to get the info from server-info API): 3.4.0
- pisix-dashboard version, if have: 2.10.1
- he plugin runner version, if the issue is about a plugin runner (cmd: depended on the kind of runner):
- uarocks version, if the issue is about installation (cmd: luarocks --version):
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@apisix.apache.org.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [apisix] github-actions[bot] commented on issue #7330: help request: How to handle ETCD REST API unauthorized access vulnerability？
Posted by "github-actions[bot] (via GitHub)" <gi...@apache.org>.
github-actions[bot] commented on issue #7330:
URL: https://github.com/apache/apisix/issues/7330#issuecomment-1607135036
This issue has been closed due to lack of activity. If you think that is incorrect, or the issue requires additional review, you can revive the issue at any time.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@apisix.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [apisix] github-actions[bot] closed issue #7330: help request: How to handle ETCD REST API unauthorized access vulnerability？
Posted by "github-actions[bot] (via GitHub)" <gi...@apache.org>.
github-actions[bot] closed issue #7330: help request: How to handle ETCD REST API unauthorized access vulnerability？
URL: https://github.com/apache/apisix/issues/7330
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@apisix.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [apisix] github-actions[bot] commented on issue #7330: help request: How to handle ETCD REST API unauthorized access vulnerability？
Posted by "github-actions[bot] (via GitHub)" <gi...@apache.org>.
github-actions[bot] commented on issue #7330:
URL: https://github.com/apache/apisix/issues/7330#issuecomment-1587009631
This issue has been marked as stale due to 350 days of inactivity. It will be closed in 2 weeks if no further activity occurs. If this issue is still relevant, please simply write any comment. Even if closed, you can still revive the issue at any time or discuss it on the dev@apisix.apache.org list. Thank you for your contributions.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@apisix.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org