Lucene search
K

5 matches found

Amazon
Amazon
added 2026/04/30 12:0 a.m.7 views

Medium: ecs-service-connect-agent

Issue Overview: Envoy is a cloud-native high-performance edge/middle/service proxy. A security vulnerability in Envoy allows external clients to manipulate Envoy headers, potentially leading to unauthorized access or other malicious actions within the mesh. This issue arises due to Envoy's defaul...

7.5CVSS6.9AI score0.16212EPSS
Exploits2
Amazon
Amazon
added 2024/11/14 12:0 a.m.5 views

Medium: ecs-service-connect-agent

Issue Overview: Envoy is a cloud-native high-performance edge/middle/service proxy. A security vulnerability in Envoy allows external clients to manipulate Envoy headers, potentially leading to unauthorized access or other malicious actions within the mesh. This issue arises due to Envoy's defaul...

7.5CVSS8.1AI score0.16212EPSS
Exploits2
Vulnrichment
Vulnrichment
added 2024/09/19 11:34 p.m.21 views

CVE-2024-45806 Potential manipulate `x-envoy` headers from external sources in envoy

Envoy is a cloud-native high-performance edge/middle/service proxy. A security vulnerability in Envoy allows external clients to manipulate Envoy headers, potentially leading to unauthorized access or other malicious actions within the mesh. This issue arises due to Envoy's default configuration ...

6.5CVSS6.5AI score0.00378EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/09/19 11:34 p.m.20 views

CVE-2024-45806 Potential manipulate `x-envoy` headers from external sources in envoy

Envoy is a cloud-native high-performance edge/middle/service proxy. A security vulnerability in Envoy allows external clients to manipulate Envoy headers, potentially leading to unauthorized access or other malicious actions within the mesh. This issue arises due to Envoy's default configuration ...

6.5CVSS0.00378EPSS
Exploits0References1
OSV
OSV
added 2024/09/19 11:34 p.m.10 views

CVE-2024-45806 Potential manipulate `x-envoy` headers from external sources in envoy

Envoy is a cloud-native high-performance edge/middle/service proxy. A security vulnerability in Envoy allows external clients to manipulate Envoy headers, potentially leading to unauthorized access or other malicious actions within the mesh. This issue arises due to Envoy's default configuration ...

6.5CVSS7.2AI score0.00378EPSS
Exploits0References3
Rows per page
Query Builder