CVE-2022-39388

Istio is an open platform to connect, manage, and secure microservices. In versions on the 1.15.x branch prior to 1.15.3, a user can impersonate any workload identity within the service mesh if they have localhost access to the Istiod control plane. Version 1.15.3 contains a patch for this issue...

CVE-2022-39388

creationtimestamp| type| source ---|---|--- 2022-11-13 05:52:08+00:00| seen| https://t.me/cibsecurity/52916...

CVE-2022-39388

CVE-2022-39388 affects Istio on the 1.15.x branch prior to 1.15.3. If a user has localhost access to the Istiod control plane, they can impersonate any workload identity within the service mesh due to an issue in the authentication/identity flow. The issue is publicly documented as fixed in 1.15....