Known Vulnerabilities for Openshift Service Mesh by Redhat
Listed below are 10 of the newest known vulnerabilities associated with "Openshift Service Mesh" by "Redhat".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2023-44487 json | The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many stre... | 7.5 - HIGH | 2023-10-10 | 2024-02-02 |
| CVE-2022-3962 json | A content spoofing vulnerability was found in Kiali. It was discovered that Kiali does not implement error handling when the ... | 4.3 - MEDIUM | 2023-09-23 | 2023-11-07 |
| CVE-2021-3586 json | A flaw was found in servicemesh-operator. The NetworkPolicy resources installed for Maistra do not properly specify which por... | 9.8 - CRITICAL | 2022-08-22 | 2022-08-26 |
| CVE-2021-3495 json | An incorrect access control flaw was found in the kiali-operator in versions before 1.33.0 and before 1.24.7. This flaw allow... | 8.8 - HIGH | 2021-06-01 | 2021-06-14 |
| CVE-2020-27846 json | A signature verification vulnerability exists in crewjam/saml. This flaw allows an attacker to bypass SAML Authentication. Th... | 9.8 - CRITICAL | 2020-12-21 | 2023-11-07 |
| CVE-2020-8661 json | CNCF Envoy through 1.13.0 may consume excessive amounts of memory when responding internally to pipelined requests. | 7.5 - HIGH | 2020-03-04 | 2022-05-24 |
| CVE-2020-8659 json | CNCF Envoy through 1.13.0 may consume excessive amounts of memory when proxying HTTP/1.1 requests or responses with many smal... | 7.5 - HIGH | 2020-03-04 | 2022-09-30 |
| CVE-2020-8595 json | Istio versions 1.2.10 (End of Life) and prior, 1.3 through 1.3.7, and 1.4 through 1.4.3 allows authentication bypass. The Aut... | 7.3 - HIGH | 2020-02-12 | 2020-02-20 |
| CVE-2020-1764 json | A hard-coded cryptographic key vulnerability in the default configuration file was found in Kiali, all versions prior to 1.15... | 8.6 - HIGH | 2020-03-26 | 2023-11-07 |
| CVE-2020-1762 json | An insufficient JWT validation vulnerability was found in Kiali versions 0.4.0 to 1.15.0 and was fixed in Kiali version 1.15.... | 8.6 - HIGH | 2020-04-27 | 2023-11-07 |