TI-2021-12444 CVE-2021-32777
Incorrect concatenation of multiple value request headers in ext-authz extension
Priority MEDIUM 43
Envoy is an open source L7 proxy and communication bus designed for large modern service oriented architectures.
RHSA-2021:3272
Red Hat OpenShift Service Mesh 2.0.7.1 security update
Released 2021-08-25 · Red Hat rating Important · View on Red Hat →
Fixed in
- OpenShift Service Mesh 2.0 servicemesh-2.0.7-3.el8, servicemesh-istioctl-2.0.7-3.el8, servicemesh-mixc-2.0.7-3.el8 +4
Fixes 5 records
Priority MEDIUM 40
Envoy is an open source L7 proxy and communication bus designed for large modern service oriented architectures.
TI-2021-16541 CVE-2021-39155 · GHSA-7774-7vr3-cc8j
Authorization Policy Bypass Due to Case Insensitive Host Comparison
Priority LOW 39
Istio is an open source platform for providing a uniform way to integrate microservices, manage traffic flow across microservices, enforce policies and aggregate telemetry data.
TI-2021-12446 CVE-2021-32779
Incorrectly handling of URI '#fragment' element as part of the path element
Priority LOW 39
Envoy is an open source L7 proxy and communication bus designed for large modern service oriented architectures.
TI-2021-16542 CVE-2021-39156 · GHSA-hqxw-mm44-gc4r
Fragments in Path May Lead to Authorization Policy Bypass
Priority LOW 38
Istio is an open source platform for providing a uniform way to integrate microservices, manage traffic flow across microservices, enforce policies and aggregate telemetry data.