EUVD-2021-22991

Malware in sbrugna...

CVE-2021-36371

Emissary-Ingress formerly Ambassador API Gateway through 1.13.9 allows attackers to bypass client certificate requirements i.e., mTLS certrequired on backend upstreams when more than one TLSContext is defined and at least one configuration exists that does not require client certificate...

PT-2021-21256

Name of the Vulnerable Software and Affected Versions Emissary-Ingress formerly Ambassador API Gateway versions 1.13.9 and earlier Description The issue allows attackers to bypass client certificate requirements on backend upstreams when more than one TLSContext is defined and at least one...

CVE-2021-36371: Improper Certificate Validation

Emissary-Ingress formerly Ambassador API Gateway through 1.13.9 allows attackers to bypass client certificate requirements i.e., mTLS certrequired on backend upstreams when more than one TLSContext is defined and at least one configuration exists that does not require client certificate...