CVE-2022-21701

Istio CVE-2022-21701 affects Istio releases 1.12.0 and 1.12.1. The issue is a privilege escalation via the Kubernetes Gateway API: users with CREATE permissions on gateways.gateway.networking.k8s.io can elevate privileges to create resources they wouldn’t normally access (e.g., Pod). Impact is li...

PT-2022-15051

Name of the Vulnerable Software and Affected Versions Istio versions 1.12.0 through 1.12.1 Description Istio is an open platform to connect, manage, and secure microservices. The issue allows users with CREATE permission for gateways.gateway.networking.k8s.io objects to escalate this privilege an...

CVE-2022-21701: Incorrect Authorization

Istio is an open platform to connect, manage, and secure microservices. In versions 1.12.0 and 1.12.1 Istio is vulnerable to a privilege escalation attack. Users who have CREATE permission for gateways.gateway.networking.k8s.io objects can escalate this privilege to create other resources that th...