Lucene search
+L

1 matches found

OSV
OSV
added 2022/02/22 10:35 p.m.35 views

CVE-2022-21654 Incorrect configuration handling allows TLS session re-use without re-validation in Envoy

Envoy is an open source edge and service proxy, designed for cloud-native applications. Envoy's tls allows re-use when some cert validation settings have changed from their default configuration. The only workaround for this issue is to ensure that default tls settings are used. Users are advised...

7.4CVSS8AI score0.01078EPSS
SaveExploits0References4
Rows per page
Query Builder