Database/Container, Kubernetes & orchestration
Istio: With AUTO_PASSTHROUGH gateways, an external client reaches arbitrary in-cluster services, bypassing
CVE-2021-31921Container, Kubernetes & orchestrationcurated
Impact
With AUTO_PASSTHROUGH gateways, an external client reaches arbitrary in-cluster services, bypassing all authorization
Who can reach it
Unauthenticated network via the ingress gateway
What to do
Emergency istiod and gateway upgrade; audit for AUTO_PASSTHROUGH gateways
References
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.