173 matches found
Red Hat OpenShift Service Mesh environmental issues and vulnerabilities
Red Hat OpenShift Service Mesh is a suite of platforms for connecting, managing, and monitoring microservices-based applications from Red Hat USA. An environment issue vulnerability exists in Red Hat OpenShift Service Mesh versions 2.6.3 and 2.5.6, which stems from incorrect HTTP header handling ...
PT-2025-4039 · Red Hat · Openshift Service Mesh
Name of the Vulnerable Software and Affected Versions: OpenShift Service Mesh versions 2.5.6 through 2.6.3 Description: A flaw was found in OpenShift Service Mesh due to improper HTTP header sanitization in Envoy. This may lead to rate-limiter avoidance, access-control bypass, CPU and memory...
PT-2025-4041 · Red Hat · Openshift Service Mesh
Name of the Vulnerable Software and Affected Versions: OpenShift Service Mesh versions 2.5.6 through 2.6.3 Description: The issue occurs due to improper sanitization of HTTP headers by Envoy, particularly the x-forwarded-for header. This lack of sanitization can allow attackers to inject maliciou...
CVE-2025-0754
The vulnerability was found in OpenShift Service Mesh 2.6.3 and 2.5.6. This issue occurs due to improper sanitization of HTTP headers by Envoy, particularly the x-forwarded-for header. This lack of sanitization can allow attackers to inject malicious payloads into service mesh logs, leading to lo...
CVE-2025-0752
A flaw was found in OpenShift Service Mesh 2.6.3 and 2.5.6. Rate-limiter avoidance, access-control bypass, CPU and memory exhaustion, and replay attacks may be possible due to improper HTTP header sanitization in Envoy...
Important: Red Hat Security Advisory: Red Hat OpenShift Service Mesh Containers for 2.5.6
Red Hat OpenShift Service Mesh Containers for 2.5.6 This update has a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the References section. Red Hat OpenShift...
Important: Red Hat Security Advisory: Red Hat OpenShift Service Mesh Containers for 2.5.5
Red Hat OpenShift Service Mesh Containers for 2.5.5 This update has a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the References section. Red Hat OpenShift...
RHSA-2022:1276 Red Hat Security Advisory: Red Hat OpenShift Service Mesh 2.0.9 security update
Bulletin has no description...
RHSA-2019:3041 Red Hat Security Advisory: Red Hat OpenShift Service Mesh 1.0.1 RPMs
Bulletin has no description...
RHSA-2020:2861 Red Hat Security Advisory: Red Hat OpenShift Service Mesh 1.0 servicemesh-grafana security update
Bulletin has no description...
RHSA-2021:3273 Red Hat Security Advisory: Red Hat OpenShift Service Mesh 1.1.17.1 security update
Bulletin has no description...
RHSA-2021:1538 Red Hat Security Advisory: Red Hat OpenShift Service Mesh 2.0.4 security update
Bulletin has no description...
RHSA-2021:1322 Red Hat Security Advisory: Red Hat OpenShift Service Mesh 1.1.13 security update
Bulletin has no description...
RHSA-2020:4129 Red Hat Security Advisory: Red Hat OpenShift Service Mesh 1.1 servicemesh-proxy security update
Bulletin has no description...
RHSA-2020:2795 Red Hat Security Advisory: Red Hat OpenShift Service Mesh 1.1 servicemesh-operator security update
Bulletin has no description...
RHSA-2020:2798 Red Hat Security Advisory: Red Hat OpenShift Service Mesh 1.1 servicemesh-proxy security update
Bulletin has no description...
RHEA-2020:1416 Red Hat Enhancement Advisory: Red Hat OpenShift Service Mesh 1.1.0 RPMs
Bulletin has no description...
RHSA-2020:0477 Red Hat Security Advisory: Red Hat OpenShift Service Mesh 1.0.7 servicemesh-proxy security update
Bulletin has no description...