CVE-2022-39388
Istio may allow identity impersonation if user has localhost access
概要
Istio may allow identity impersonation if user has localhost access
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
Istio is an open platform to connect, manage, and secure microservices. In versions on the 1.15.x branch prior to 1.15.3, a user can impersonate any workload identity within the service mesh if they have localhost access to the Istiod control plane. Version 1.15.3 contains a patch for this issue. There are no known workarounds.
出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
参照URL
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- patch github.com
- patch github.com
- web istio.io