CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

3 matches found

OSV•added 2019/06/05 3:29 p.m.•17 views

CVE-2019-12243

Istio 1.1.x through 1.1.6 has Incorrect Access Control...

7.5CVSS6.9AI score0.01175EPSS

Exploits1References2

CVE•added 2019/06/05 2:41 p.m.•61 views

CVE-2019-12243

Consolidated evidence across connected documents shows a concrete vulnerability in Istio 1.1.x–1.1.6 described as Incorrect Access Control. The root cause is a behavioral change in istio/pilot/pkg/networking/plugin/mixer/mixer.go that, when disablePolicyChecks is false, prevents inbound TCP conne...

7.5CVSS7.5AI score0.01175EPSS

Exploits1References2Affected Software1