Incorrect Access Control Restrictions

2020-07-0203:12:28

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.001 Low

EPSS

Percentile

43.0%

JSON

openshift-service-mesh/istio-rhel8-operator is vulnerable to incorrect access control.The control plane can deploy gateway image to any namespace.

CPENameOperatorVersion
servicemesh-operatoreq1.0.8__2.el8
servicemesh-operatoreq1.0.4__2.el8
servicemesh-operatoreq1.0.1__8.el8
servicemesh-operatoreq1.0.7__1.el8
servicemesh-operatoreq1.0.3__1.el8
servicemesh-operatoreq0.11.0__8.el8
servicemesh-operatoreq1.0.10__2.el8
servicemesh-operatoreq1.0.6__1.el8
servicemesh-operatoreq0.12.0__7.el8
servicemesh-operatoreq1.0.9__1.el8

Name	Operator	Version
servicemesh-operator	eq	1.0.8__2.el8
servicemesh-operator	eq	1.0.4__2.el8
servicemesh-operator	eq	1.0.1__8.el8
servicemesh-operator	eq	1.0.7__1.el8
servicemesh-operator	eq	1.0.3__1.el8
servicemesh-operator	eq	0.11.0__8.el8
servicemesh-operator	eq	1.0.10__2.el8
servicemesh-operator	eq	1.0.6__1.el8
servicemesh-operator	eq	0.12.0__7.el8
servicemesh-operator	eq	1.0.9__1.el8