Description
Istio 1.1.x through 1.1.6 has Incorrect Access Control.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Go | istio.io/istio | >= 1.1.0, < 1.1.7 | 1.1.7 | GHSA-6g5f-f5pm-mjrg |
Critical · 9.3
CVE-2019-12243
EUVD-2022-0859GHSA-6g5f-f5pm-mjrg
Istio may not check inbound TCP connections against istio-policy
Published Jun 5, 2019 · Updated Aug 4, 2024 · Assigned by mitre