Lucene search
GoogleOSV:GHSA-6G5F-F5PM-MJRGHistoryFeb 15, 2022 - 1:57 a.m.
Istio may not check inbound TCP connections against istio-policy
2022-02-1501:57:18
Google
osv.dev
4
istio
access control
tcp connections
version 1.1.x to 1.1.6
EPSS
0.001
Percentile
42.3%
Istio 1.1.x through 1.1.6 has Incorrect Access Control. When disablePolicyChecks is set to false, inbound TCP connections do not generate Check requests to istio-policy and external authorization is not applied.
This behavior is a result of a change to istio/pilot/pkg/networking/plugin/mixer/mixer.go in 1.1.
Related
gitlab
gitlab
Improper Access Control
2019-06-05 00:00:00
Vulnerability in Istio
2022-02-15 00:00:00
prion
prion
Improper access control
2019-06-05 15:29:00
cvelist
cvelist
CVE-2019-12243
2019-06-05 14:41:06
cve
cve
CVE-2019-12243
2019-06-05 15:29:01
github
github
Istio may not check inbound TCP connections against istio-policy
2022-02-15 01:57:18
osv
osv
CVE-2019-12243
2019-06-05 15:29:01
nvd
nvd
CVE-2019-12243
2019-06-05 15:29:01