Red Hat Security Advisory

RHSA-2020:3090

Red Hat OpenShift Service Mesh 1.1 servicemesh-proxy security update

Released 2020-07-22 · Red Hat rating Moderate · View on Red Hat →

Fixed in

OpenShift Service Mesh 1.1 servicemesh-proxy-1.1.5-1.el8

Fixes 1 record

TI-2020-11879 CVE-2020-15104

TLS Validation Vulnerability in Envoy

LOW 24

In Envoy before versions 1.12.6, 1.13.4, 1.14.4, and 1.15.0 when validating TLS certificates, Envoy would incorrectly allow a wildcard DNS Subject Alternative Name apply to multiple subdomains.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00252 Published 2020-07-14 Fixed in 1.12.6, 1.13.4 +1 CWE-346