{"schema_version":"1.3.1","id":"GO-2024-2527","modified":"2024-07-09T21:52:25Z","published":"2024-06-28T15:28:53Z","aliases":["GHSA-5x4g-q5rc-36jp"],"summary":"Insecure ciphers are allowed by default in go.etcd.io/etcd","details":"The TLS ciphers list supported by etcd contains insecure cipher suites. Users may specify that an insecure cipher is used via “--cipher-suites” flag. A list of secure suites is used by default.","affected":[{"package":{"name":"go.etcd.io/etcd","ecosystem":"Go"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"0.5.0-alpha.5.0.20221102000833-1f054980bc27"}]}],"ecosystem_specific":{"imports":[{"path":"go.etcd.io/etcd/pkg/tlsutil"}],"custom_ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.2.22"},{"fixed":"3.4.22"}]}]}}],"references":[{"type":"ADVISORY","url":"https://github.com/etcd-io/etcd/security/advisories/GHSA-5x4g-q5rc-36jp"}],"database_specific":{"url":"https://pkg.go.dev/vuln/GO-2024-2527","review_status":"REVIEWED"}}