CVE-2022-21701 Privileged Escalation in Istio

Istio is an open platform to connect, manage, and secure microservices. In versions 1.12.0 and 1.12.1 Istio is vulnerable to a privilege escalation attack. Users who have CREATE permission for gateways.gateway.networking.k8s.io objects can escalate this privilege to create other resources that th...

PT-2022-15051

Name of the Vulnerable Software and Affected Versions Istio versions 1.12.0 through 1.12.1 Description Istio is an open platform to connect, manage, and secure microservices. The issue allows users with CREATE permission for gateways.gateway.networking.k8s.io objects to escalate this privilege an...

CVE-2022-21701: Incorrect Authorization

Istio is an open platform to connect, manage, and secure microservices. In versions 1.12.0 and 1.12.1 Istio is vulnerable to a privilege escalation attack. Users who have CREATE permission for gateways.gateway.networking.k8s.io objects can escalate this privilege to create other resources that th...