← Back

CVE-2021-34824

nvd nist
Published: Jun 29, 2021Modified: Jun 17, 2026

JSON object

Loading...
8.8
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Exploitability: 2.8 / Impact: 5.9
Source: NVD

Description

Istio (1.8.x, 1.9.0-1.9.5 and 1.10.0-1.10.1) contains a remotely exploitable vulnerability where credentials specified in the Gateway and DestinationRule credentialName field can be accessed from different namespaces.

Affected (2)

Products: Istio: Istio
Istio
1 product
Istio
Configuration A
2 vulnerable
Vulnerable SoftwareAffected Versions
Istio
Istio
From 1.10.0 to 1.10.2
Istio
From 1.8.0 to 1.9.6

References (4)

Source: cve@mitre.org
Release NotesThird Party Advisory
Source: cve@mitre.org
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Release NotesThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.