K94093538: NGINX Service Mesh control plane vulnerability CVE-2022-27495

Security Advisory Description NGINX Service Mesh control plane endpoints are exposed to the cluster overlay network. CVE-2022-27495 Impact An attacker may affect traffic policies, security policies, and other reverse proxy capabilities of NGINX Service Mesh if they've gained access to a Kubernete...

CVE-2022-27495

On all versions 1.3.x fixed in 1.4.0 NGINX Service Mesh control plane endpoints are exposed to the cluster overlay network. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

CVE-2022-27495

Summary of CVE-2022-27495 : The vulnerability affects NGINX Service Mesh (NGINX Service Mesh control plane) where endpoints are exposed to the cluster overlay network in versions 1.3.x; fixed in 1.4.0. The F5 advisory K94093538 lists affected branch 1.x (1.3.0–1.3.1) with fix in 1.4.0, and descri...