CVE-2020-14306

CVE-2020-14306 is an improper access control flaw in the OpenShift Service Mesh Istio RHEL8 operator (openshift-service-mesh/istio-rhel8-operator) up to version 1.1.3. Described in multiple sources, the issue lets an attacker with basic cluster access deploy a gateway/pod into any namespace, pote...