Openshift_service_mesh

Repositories	Unknown: This might be proprietary software.
#Vulnerabilities	20

Date	Id	Summary	Products	Score	Patch	Annotated
2021-01-29	CVE-2019-25014	A NULL pointer dereference was found in pkg/proxy/envoy/v2/debug.go getResourceVersion in Istio pilot before 1.5.0-alpha.0. If a particular HTTP GET request is made to the pilot API endpoint, it is possible to cause the Go runtime to panic (resulting in a denial of service to the istio-pilot application).	Istio, Openshift_service_mesh	6.5
2020-02-12	CVE-2020-8595	Istio versions 1.2.10 (End of Life) and prior, 1.3 through 1.3.7, and 1.4 through 1.4.3 allows authentication bypass. The Authentication Policy exact-path matching logic can allow unauthorized access to HTTP paths even if they are configured to be only accessed after presenting a valid JWT token. For example, an attacker can add a ? or # character to a URI that would otherwise satisfy an exact-path match.	Istio, Openshift_service_mesh	N/A