CVE-2021-3586

A flaw was found in servicemesh-operator. The NetworkPolicy resources installed for Maistra do not properly specify which ports may be accessed, allowing access to all ports on these resources from any pod. The highest threat from this vulnerability is to data confidentiality and integrity as wel...

CVE-2021-3586

A flaw was found in servicemesh-operator. The NetworkPolicy resources installed for Maistra do not properly specify which ports may be accessed, allowing access to all ports on these resources from any pod. The highest threat from this vulnerability is to data confidentiality and integrity as wel...

CVE-2021-3586

A flaw was found in servicemesh-operator. The NetworkPolicy resources installed for Maistra do not properly specify which ports may be accessed, allowing access to all ports on these resources from any pod. The highest threat from this vulnerability is to data confidentiality and integrity as wel...

CVE-2021-3586

CVE-2021-3586 concerns Red Hat OpenShift Service Mesh (servicemesh-operator). The issue is that NetworkPolicy resources for Maistra do not properly specify ingress ports, potentially allowing access to all ports from any pod, which can impact confidentiality, integrity, and availability. The vuln...

CVE-2021-3586: Initialization of a Resource with an Insecure Default

A flaw was found in servicemesh-operator. The NetworkPolicy resources installed for Maistra do not properly specify which ports may be accessed, allowing access to all ports on these resources from any pod. The highest threat from this vulnerability is to data confidentiality and integrity as wel...

PT-2022-10475

Name of the Vulnerable Software and Affected Versions servicemesh-operator affected versions not specified Description A flaw was found in the servicemesh-operator, where the NetworkPolicy resources installed for Maistra do not properly specify which ports may be accessed. This allows access to a...

Privilege Escalation

servicemesh-operator is vulnerable to privilege escalation. The NetworkPolicy resources installed for Maistra do not properly specify which ports may be accessed, allowing access to all ports on these resources from any pod...

servicemesh-operator: NetworkPolicy resources incorrectly specify ports for ingress resources

A flaw was found in servicemesh-operator. The NetworkPolicy resources installed for Maistra do not properly specify which ports may be accessed, allowing access to all ports on these resources from any pod. The highest threat from this vulnerability is to data confidentiality and integrity as wel...

CVE-2021-3586

A flaw was found in servicemesh-operator. The NetworkPolicy resources installed for Maistra do not properly specify which ports may be accessed, allowing access to all ports on these resources from any pod. The highest threat from this vulnerability is to data confidentiality and integrity as wel...

CVE-2020-1704

CVE-2020-1704 describes an insecure modification vulnerability in the openshift/istio-kialia-rhel7-operator-container of OpenShift Service Mesh (Maistra) prior to 1.0.8. An attacker with container access could modify /etc/passwd to escalate privileges, causing local privilege escalation (privileg...

PT-2020-14903

Name of the Vulnerable Software and Affected Versions OpenShift ServiceMesh maistra versions prior to 1.0.8 Description A flaw was discovered in the /etc/passwd file, allowing an attacker with access to the container to modify it and potentially escalate their privileges. This issue affects the...