3 matches found
CVE-2019-12243
Istio 1.1.x through 1.1.6 has Incorrect Access Control...
7.5CVSS6.9AI score0.01175EPSS
SaveExploits1References2
CVE-2019-12243
Consolidated evidence across connected documents shows a concrete vulnerability in Istio 1.1.x–1.1.6 described as Incorrect Access Control. The root cause is a behavioral change in istio/pilot/pkg/networking/plugin/mixer/mixer.go that, when disablePolicyChecks is false, prevents inbound TCP conne...
7.5CVSS7.5AI score0.01175EPSS
SaveExploits1References2Affected Software1
20