CVE-2021-3586

2022-08-2214:46:32

CWE-1188

redhat

www.cve.org

servicemesh-operator

networkpolicy

maistra

data confidentiality

integrity

system availability

9.6 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

55.9%

JSON

A flaw was found in servicemesh-operator. The NetworkPolicy resources installed for Maistra do not properly specify which ports may be accessed, allowing access to all ports on these resources from any pod. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

CNA Affected

[
  {
    "product": "servicemesh-operator",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Affects v2.0.5.1, Fixed in v2.0.5.2."
      }
    ]
  }
]