Security Advisory

CVE-2021-31921

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2021-06-02 15:36:41

Last updated 2024-08-03 23:10:31

Assigner mitre

State PUBLISHED

Description

Istio before 1.8.6 and 1.9.x before 1.9.5 contains a remotely exploitable vulnerability where an external client can access unexpected services in the cluster, bypassing authorization checks, when a gateway is configured with AUTO_PASSTHROUGH routing configuration.

← Browse all CVEs View on cve.org ↗