CVE-2020-8843

An issue was discovered in Istio 1.3 through 1.3.6. Under certain circumstances, it is possible to bypass a specifically configured Mixer policy. Istio-proxy accepts the x-istio-attributes header at ingress that can be used to affect policy decisions when Mixer policy selectively applies to a...

Design/Logic Flaw

An issue was discovered in Istio 1.3 through 1.3.6. Under certain circumstances, it is possible to bypass a specifically configured Mixer policy. Istio-proxy accepts the x-istio-attributes header at ingress that can be used to affect policy decisions when Mixer policy selectively applies to a...

CVE-2019-18817

Istio 1.3.x before 1.3.5 allows Denial of Service because continueonlistenerfilterstimeout is set to True, a related issue to CVE-2019-18836...

CVE-2019-18817

Istio 1.3.x before 1.3.5 allows Denial of Service because continueonlistenerfilterstimeout is set to True, a related issue to CVE-2019-18836...