Envoy 安全漏洞

Envoy is an open source distributed proxy server. A security vulnerability exists in Envoy. The vulnerability allows an attacker to bypass rule policies that use the extauthz extension. The biggest threats from this vulnerability are confidentiality, integrity, and system availability...

PT-2019-12713

Name of the Vulnerable Software and Affected Versions Istio versions 1.1.x through 1.1.6 Description The issue is related to Incorrect Access Control. When the disablePolicyChecks variable is set to false, inbound TCP connections do not generate Check requests to istio-policy and external...

Authorization

When APM 13.0.0-13.1.x is deployed as an OAuth Resource Server, APM becomes a client application to an external OAuth authorization server. In certain cases when communication between the BIG-IP APM and the OAuth authorization server is lost, APM may not display the intended message in the failur...