An open API service providing security vulnerability metadata for many open source software ecosystems.
Security Advisories: GSA_kwCzR0hTQS02YzZwLWg3OWYtZzZwNM4AAvxx
Istio may allow identity impersonation if user has localhost access
User can impersonate any workload identity within the service mesh if they have localhost access to the Istiod control plane.
No. If using 1.15.2 please upgrade to 1.15.3 or later.
None at this time.
For more information
If you have any questions or comments about this advisory, please email us at [email protected]Permalink: https://github.com/advisories/GHSA-6c6p-h79f-g6p4
Source: GitHub Advisory Database
Published: 11 months ago
Updated: 8 months ago
CVSS Score: 7.6
CVSS vector: CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N
Identifiers: GHSA-6c6p-h79f-g6p4, CVE-2022-39388
Fixed in: 1.15.3