1 matches found
Authentication flaw
Envoy is a high-performance edge/middle/service proxy. External authentication can be bypassed by downstream connections. Downstream clients can force invalid gRPC requests to be sent to extauthz, circumventing extauthz checks when failuremodeallow is set to true. This issue has been addressed in...
5CVSS7.2AI score0.006EPSS
SaveExploits0References2Affected Software1
20