A flaw was found in servicemesh-operator. The NetworkPolicy resources installed for Maistra do not properly specify which ports may be accessed, allowing access to all ports on these resources from any pod. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HRed Hat Openshift Service Mesh
APPRedhat2.0Red Hat Servicemesh Operator
APPRedhat2.0.5.1
Related vulnerabilities
Pominięcie uwierzytelniania SAML przez błąd weryfikacji podpisu
Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to versions 1.35....
Axios is a promise based HTTP client for the browser and Node.js. From 0.19.0 to before 0.31.1 and 1.15.2, Axi...
A flaw was found in OpenShift Service Mesh 2.6.3 and 2.5.6. Rate-limiter avoidance, access-control bypass, CPU...
An incorrect access control flaw was found in the kiali-operator in versions before 1.33.0 and before 1.24.7. ...