1 matches found
@grpc/grpc-js: RBAC override configs in VirtualHost and Route resources are not applied
Summary XdsServer in @grpc/grpc-js-xds does not apply RBACPerRoute overrides from matching Route or VirtualHost resources. When a trusted xDS control plane supplies a broad top-level ALLOW policy and a stricter override, XdsServer ACKs the resources but evaluates the RPC under the top-level polic...
6.9CVSS
SaveExploits0References4Affected Software1
20