Vulnerabilities affecting this package (1)
| Vulnerability |
Summary |
Fixed by |
VCID-113c-txjs-17d6
Aliases:
CVE-2020-16844
GHSA-82mm-ffjr-h86c
|
Authorization bypass in Istio
In Istio 1.5.0 though 1.5.8 and Istio 1.6.0 through 1.6.7, when users specify an AuthorizationPolicy resource with DENY actions using wildcard suffixes (e.g. *-some-suffix) for source principals or namespace fields, callers will never be denied access, bypassing the intended policy.
### Specific Go Packages Affected
istio.io/istio/pilot/pkg/security/authz/model/matcher
|
There are no reported fixed by versions.
|
Vulnerabilities fixed by this package (0)
| Vulnerability |
Summary |
Aliases |
|
This package is not known to fix vulnerabilities.
|