Authorization Bypass

2022-01-2013:17:01

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

istio vulnerability bypass endpointslice function software

EPSS

0.002

Percentile

60.5%

JSON

github.com/istio/istio is vulnerable to authorization bypass. The vulnerability exists in the forgetEndpoint function in endpointslice.go file allowing an attacker to bypass and gain access to the protected resource.

References

github.com/istio/istio/commit/6b3141a0c5d3914c800c916f930105dccf95ff0a#

github.com/istio/istio/pull/35282

github.com/istio/istio/security/advisories/GHSA-rwfr-xrvw-2rvv

istio.io/latest/news/releases/1.12.x/announcing-1.12.2/

EPSS

0.002

Percentile

60.5%

JSON

Related for VERACODE:33794