Database/Container, Kubernetes & orchestration
Istio: A user with CREATE on Gateway API resources escalates privilege in istiod
CVE-2022-21701Container, Kubernetes & orchestrationcurated
Impact
A user with CREATE on Gateway API resources escalates privilege in istiod
Who can reach it
Cluster user with namespace access and Gateway API rights
What to do
Rolling istiod upgrade; restrict Gateway creation
References
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.