CVE-2021-3586
published 2022-08-22CVE-2021-3586: A flaw was found in servicemesh-operator. The NetworkPolicy resources installed for Maistra do not properly specify which ports may be accessed, allowing…
PriorityP349critical9.8CVSS 3.1
AVNACLPRNUINSUCHIHAH
EPSS
0.88%
55.1th percentile
A flaw was found in servicemesh-operator. The NetworkPolicy resources installed for Maistra do not properly specify which ports may be accessed, allowing access to all ports on these resources from any pod. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| redhat | openshift_service_mesh | — | — |
| redhat | servicemesh-operator | — | — |
| redhat | servicemesh-operator | — | — |
CVSS provenance
nvdv3.19.8CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
vendor_redhat9.8CRITICAL
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-hq9j-p426-983m: A flaw was found in servicemesh-operator
ghsa_unreviewed·2022-08-23
CVE-2021-3586 [CRITICAL] CWE-1188 GHSA-hq9j-p426-983m: A flaw was found in servicemesh-operator
A flaw was found in servicemesh-operator. The NetworkPolicy resources installed for Maistra do not properly specify which ports may be accessed, allowing access to all ports on these resources from any pod. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
Red Hat
servicemesh-operator: NetworkPolicy resources incorrectly specify ports for ingress resources
vendor_redhat·2021-06-10·CVSS 9.8
CVE-2021-3586 [CRITICAL] CWE-305 servicemesh-operator: NetworkPolicy resources incorrectly specify ports for ingress resources
servicemesh-operator: NetworkPolicy resources incorrectly specify ports for ingress resources
A flaw was found in servicemesh-operator. The NetworkPolicy resources installed for Maistra do not properly specify which ports may be accessed, allowing access to all ports on these resources from any pod. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
A flaw was found in servicemesh-operator. The NetworkPolicy resources installed for Maistra do not properly specify which ports may be accessed, allowing access to all ports on these resources from any pod. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
Mitigation: Red Hat has investigated whether a possible m
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2022-08-22
Published