Istio Operator Project

istio-operator_project

1 CVE • 1 product

Products (1)

Click to collapse

Toggle

Istio Operator

istio-operator

1 CVE

CVEs (1)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2020-14306 1Istio Operator Project 1Istio Operator Jun 17, 2026 Sep 16, 2020 N/A· v4 8.8 HIGH· v3 6.5 MEDIUM· v2 An incorrect access control flaw was found in the operator, openshift-service-mesh/istio-rhel8-operator all versions through 1.1.3. This flaw allows an attacker with a basic level of access to the cluster to deploy a cus...Show more An incorrect access control flaw was found in the operator, openshift-service-mesh/istio-rhel8-operator all versions through 1.1.3. This flaw allows an attacker with a basic level of access to the cluster to deploy a custom gateway/pod to any namespace, potentially gaining access to privileged service account tokens. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.Show less

CVE

VENDORS

PRODUCTS

UPDATED

PUBLISHED

CVSS

CVE-2020-14306

1Istio Operator Project

1Istio Operator

Jun 17, 2026

Sep 16, 2020

N/A· v4

8.8 HIGH· v3

6.5 MEDIUM· v2

An incorrect access control flaw was found in the operator, openshift-service-mesh/istio-rhel8-operator all versions through 1.1.3. This flaw allows an attacker with a basic level of access to the cluster to deploy a custom gateway/pod to any namespace, potentially gaining access to privileged service account tokens. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.Show less