Red Hat Security Advisory

RHSA-2021:2061

Red Hat OpenShift Service Mesh 2.0.5 security update

Released 2021-05-20 · Red Hat rating Important · View on Red Hat →

Fixed in

OpenShift Service Mesh 2.0 servicemesh-2.0.5-3.el8, servicemesh-istioctl-2.0.5-3.el8, servicemesh-mixc-2.0.5-3.el8 +3

Fixes 1 record

TI-2021-11909 CVE-2021-31921 · GHSA-3j84-jghj-gqwg

Istio before 1.8.6 and 1.9.x before 1.9.5 contains a remotely exploitable vulnerability…

MEDIUM 45

Istio before 1.8.6 and 1.9.x before 1.9.5 contains a remotely exploitable vulnerability where an external client can access unexpected services in the cluster, bypassing authorization checks, when a gateway is configured…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01454 Published 2021-06-02 Fixed CWE-862