Go/istio.io/istio CVE-2020-16844: medium 6.8, EPSS 1.09%
Authorization bypass in Istio
Action: Upgrade istio.io/istio to 1.5.9 or later.
go get istio.io/istio@v1.5.9go get istio.io/istio@v1.6.8Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.5.0 | 1.5.9 | - |
| 1.6.0 | 1.6.8 | - |
Fixed versions
| 1.5.9 | 1.6.8 |
Sources
- osv: GHSA-82mm-ffjr-h86c
- https://nvd.nist.gov/vuln/detail/CVE-2020-16844
- https://github.com/istio/istio/commit/4c73414556b83f0e75c1b3a0a89a23103a71573c
- https://github.com/istio/istio/commit/72d2e135374f421b656d6f1a21f474db46134ace
- https://github.com/istio/istio/releases
- https://github.com/istio/istio/releases/tag/1.5.9
- https://github.com/istio/istio/releases/tag/1.6.8
- https://istio.io/latest/news/releases/1.5.x/announcing-1.5.9
- https://istio.io/latest/news/releases/1.6.x/announcing-1.6.8
- https://istio.io/latest/news/security/istio-security-2020-009
CVE-2020-16844 · published · modified · JSON