Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-08360
HistoryJan 23, 2022 - 12:00 a.m.

Istio Licensing Issue Vulnerability (CNVD-2022-08360)

2022-01-2300:00:00
China National Vulnerability Database
www.cnvd.org.cn
13
istio
vulnerability
authorization
authentication
networked system
denial-of-service

EPSS

0.002

Percentile

60.5%

Istio is an open platform for connecting, managing, and securing microservices. Istio is vulnerable to an authorization issue in versions 1.12.0 and 1.12.1, which stems from a lack of authentication measures or insufficient authentication strength in a networked system or product. An attacker could use this vulnerability to bypass the authorization policies of the host and NOTHOST, or perform a denial-of-service attack.

EPSS

0.002

Percentile

60.5%