CVE-2021-31921

CVE-2021-31921

Istio before 1.8.6 and 1.9.x before 1.9.5 contains a remotely exploitable vulnerability where an external client can access unexpected services in the cluster, bypassing authorization checks, when a gateway is configured with AUTO_PASSTHROUGH routing configuration.

GHSA-3j84-jghj-gqwg

Istio before 1.8.6 and 1.9.x before 1.9.5, when a gateway is using the AUTO_PASSTHROUGH routing configuration, allows attackers to bypass authorization checks and access unexpected services in the cluster.

ELSA-2021-9399

ELSA-2021-9399: olcne security update (IMPORTANT)

ELSA-2021-9398

ELSA-2021-9398: olcne security update (IMPORTANT)

ELSA-2021-9397

ELSA-2021-9397: olcne security update (IMPORTANT)