Red Hat Security Advisory

RHSA-2021:2085

servicemesh security update

Released 2021-05-20 · Red Hat rating Important · View on Red Hat →

Fixed in

OpenShift Service Mesh 1.1 servicemesh-1.1.15-4.el8, servicemesh-citadel-1.1.15-4.el8, servicemesh-galley-1.1.15-4.el8 +6

Fixes 1 record

TI-2021-11909 CVE-2021-31921 · GHSA-3j84-jghj-gqwg

Istio before 1.8.6 and 1.9.x before 1.9.5 contains a remotely exploitable vulnerability…

MEDIUM 45

Istio before 1.8.6 and 1.9.x before 1.9.5 contains a remotely exploitable vulnerability where an external client can access unexpected services in the cluster, bypassing authorization checks, when a gateway is configured…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01454 Published 2021-06-02 Fixed CWE-862