Red Hat Security Advisory

RHSA-2020:0477

Red Hat OpenShift Service Mesh 1.0.7 servicemesh-proxy security update

Released 2020-02-12 · Red Hat rating Important · View on Red Hat →

Fixed in

TI-2020-06891 CVE-2020-8595 · GHSA-6mcc-fxc5-58cv

LOW 37

Istio versions 1.2.10 (End of Life) and prior, 1.3 through 1.3.7, and 1.4 through 1.4.3 allows authentication bypass.

CVSS 3.1HIGH 7.3 Network No auth No interaction EPSS 0.02627 Published 2020-02-12 Fixed CWE-287