EUVD-2021-18794

Malware in sbrugna...

CVE-2021-31921

Istio before 1.8.6 and 1.9.x before 1.9.5 contains a remotely exploitable vulnerability where an external client can access unexpected services in the cluster, bypassing authorization checks, when a gateway is configured with AUTOPASSTHROUGH routing configuration...

CVE-2021-31921

Istio before 1.8.6 and 1.9.x before 1.9.5 contains a remotely exploitable vulnerability where an external client can access unexpected services in the cluster, bypassing authorization checks, when a gateway is configured with AUTOPASSTHROUGH routing configuration...

CVE-2021-31921: Missing Authorization

Istio before 1.8.6 and 1.9.x before 1.9.5 contains a remotely exploitable vulnerability where an external client can access unexpected services in the cluster, bypassing authorization checks, when a gateway is configured with AUTOPASSTHROUGH routing configuration...

Authorization Bypass

servicemesh is vulnerable to authorization bypass. It bypasses authorization when using AUTOPASSTHROUGH...

RHEL 8 : servicemesh (RHSA-2021:2085)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:2085 advisory. Red Hat OpenShift Service Mesh is Red Hat's distribution of the Istio service mesh project, tailored for installation into an on-premise OpenShift...