Known Vulnerabilities for Openshift Service Mesh by Redhat
Listed below are 10 of the newest known vulnerabilities associated with "Openshift Service Mesh" by "Redhat".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2021-3586 | A flaw was found in servicemesh-operator. The NetworkPolicy resources installed for Maistra do not properly specify which por... | 9.8 - CRITICAL | 2022-08-22 | 2022-08-26 |
| CVE-2021-3495 | An incorrect access control flaw was found in the kiali-operator in versions before 1.33.0 and before 1.24.7. This flaw allow... | 8.8 - HIGH | 2021-06-01 | 2021-06-14 |
| CVE-2020-27846 | A signature verification vulnerability exists in crewjam/saml. This flaw allows an attacker to bypass SAML Authentication. Th... | 9.8 - CRITICAL | 2020-12-21 | 2023-11-07 |
| CVE-2020-8661 | CNCF Envoy through 1.13.0 may consume excessive amounts of memory when responding internally to pipelined requests. | 7.5 - HIGH | 2020-03-04 | 2022-05-24 |
| CVE-2020-8659 | CNCF Envoy through 1.13.0 may consume excessive amounts of memory when proxying HTTP/1.1 requests or responses with many smal... | 7.5 - HIGH | 2020-03-04 | 2022-09-30 |
| CVE-2020-8595 | Istio versions 1.2.10 (End of Life) and prior, 1.3 through 1.3.7, and 1.4 through 1.4.3 allows authentication bypass. The Aut... | 7.3 - HIGH | 2020-02-12 | 2020-02-20 |
| CVE-2020-1764 | A hard-coded cryptographic key vulnerability in the default configuration file was found in Kiali, all versions prior to 1.15... | 8.6 - HIGH | 2020-03-26 | 2023-11-07 |
| CVE-2020-1762 | An insufficient JWT validation vulnerability was found in Kiali versions 0.4.0 to 1.15.0 and was fixed in Kiali version 1.15.... | 8.6 - HIGH | 2020-04-27 | 2023-11-07 |
| CVE-2020-1704 | An insecure modification vulnerability in the /etc/passwd file was found in all versions of OpenShift ServiceMesh (maistra) b... | 7.8 - HIGH | 2020-02-17 | 2023-11-07 |
| CVE-2019-9511 | Some HTTP/2 implementations are vulnerable to window size manipulation and stream prioritization manipulation, potentially le... | 7.5 - HIGH | 2019-08-13 | 2023-11-07 |