Lucene search
K

Insecure Access Control

šŸ—“ļøĀ 12 Aug 2020Ā 02:11:57Reported byĀ Veracode Vulnerability DatabaseTypeĀ 
veracode
Ā veracode
šŸ”—Ā sca.analysiscenter.veracode.comšŸ‘Ā 11Ā Views

Insecure Access Control in Istio TCP Service due to Incorrect DENY Policy Translatio

Related
Detection
Refs
ReporterTitlePublishedViews
Family
BDU FSTEC
The vulnerability of the Istio network software, related to access control deficiencies, allows attackers to compromise the confidentiality and integrity of the protected information.
21 Apr 202100:00
–bdu_fstec
Circl
CVE-2020-16844
1 Oct 202020:53
–circl
CVE
CVE-2020-16844
1 Oct 202016:32
–cve
Cvelist
CVE-2020-16844
1 Oct 202016:32
–cvelist
EUVD
EUVD-2022-0899
3 Oct 202520:07
–euvd
Github Security Blog
Authorization bypass in Istio
15 Feb 202201:57
–github
GitLab Advisory Database
Authorization bypass in Istio
15 Feb 202200:00
–gitlab
GitLab Advisory Database
Authorization bypass in Istio
15 Feb 202200:00
–gitlab
NVD
CVE-2020-16844
1 Oct 202017:15
–nvd
OSV
GHSA-82MM-FFJR-H86C Authorization bypass in Istio
15 Feb 202201:57
–osv
Rows per page
Vulners
Node
servicemeshservicemeshMatch1.0.11_1.el8
OR
servicemeshservicemeshMatch0.12.0_8.el8
OR
servicemeshservicemeshMatch1.0.7_1.el8
OR
servicemeshservicemeshMatch1.0.1_8.el8
OR
servicemeshservicemeshMatch1.1.1_2.el8
OR
servicemeshservicemeshMatch1.0.10_1.el8
OR
servicemeshservicemeshMatch1.0.9_1.el8
OR
servicemeshservicemeshMatch1.1.3_3.el8
OR
servicemeshservicemeshMatch1.0.6_1.el8
OR
servicemeshservicemeshMatch1.0.0_13.el8
OR
servicemeshservicemeshMatch1.1.6_1.el8
OR
servicemeshservicemeshMatch1.1.5_2.el8
OR
servicemeshservicemeshMatch1.1.4_1.el8
OR
servicemeshservicemeshMatch1.0.4_1.el8
OR
servicemeshservicemeshMatch1.0.5_1.el8
OR
servicemeshservicemeshMatch1.0.8_2.el8
OR
servicemeshservicemeshMatch1.0.3_1.el8
OR
servicemeshservicemeshMatch1.0.2_3.el8
OR
servicemeshservicemeshMatch1.1.5_1.el8
OR
servicemeshservicemeshMatch1.1.0_5.el8
OR
servicemeshservicemeshMatch1.1.2_2.el8
OR
servicemeshservicemeshMatch0.11.0_8.el8

Data

Build on a solid foundation withĀ Vulners data

WeĀ provide theĀ essential building blocks forĀ cybersecurity solutions withĀ comprehensive, structured, andĀ constantly updated vulnerability andĀ exploits data

Api

Power your application withĀ Vulners API

The Vulners REST API offers reliable, high-performance access toĀ vulnerabilityĀ intelligence, withĀ 99.9%Ā SLAĀ uptime andĀ CDN-backed data delivery forĀ seamlessĀ global access

App

Assess and manage vulnerabilities withĀ VulnersĀ tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

15 Oct 2020 19:11Current
2.9Low risk
Vulners AI Score2.9
CVSS 24.9
CVSS 3.16.8
EPSS0.01086
11