Red Hat Security Advisory: servicemesh-operator security update
An update for servicemesh-operator is now available for OpenShift Service Mesh 2.0. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2021-3586US | critical9.8OT elevated | — | ||
A flaw was found in servicemesh-operator. The NetworkPolicy resources installed for Maistra do not properly specify which ports may be accessed, allowing access to all ports on the… | ||||
references
External citations — patches, advisories, analysis.
remediations (8)
- Fixedservicemesh-operator-0:2.0.5-3.el8.ppc64le as a component of OpenShift Service Mesh 2.0
The OpenShift Service Mesh Release Notes provide information on the features and known issues: https://docs.openshift.com/container-platform/latest/service_mesh/v2x/servicemesh-release-notes.html
https://access.redhat.com/errata/RHSA-2021:2380 - Fixedservicemesh-operator-0:2.0.5-3.el8.s390x as a component of OpenShift Service Mesh 2.0
The OpenShift Service Mesh Release Notes provide information on the features and known issues: https://docs.openshift.com/container-platform/latest/service_mesh/v2x/servicemesh-release-notes.html
https://access.redhat.com/errata/RHSA-2021:2380 - Fixedservicemesh-operator-0:2.0.5-3.el8.src as a component of OpenShift Service Mesh 2.0
The OpenShift Service Mesh Release Notes provide information on the features and known issues: https://docs.openshift.com/container-platform/latest/service_mesh/v2x/servicemesh-release-notes.html
https://access.redhat.com/errata/RHSA-2021:2380 - Fixedservicemesh-operator-0:2.0.5-3.el8.x86_64 as a component of OpenShift Service Mesh 2.0
The OpenShift Service Mesh Release Notes provide information on the features and known issues: https://docs.openshift.com/container-platform/latest/service_mesh/v2x/servicemesh-release-notes.html
https://access.redhat.com/errata/RHSA-2021:2380 - Workaroundservicemesh-operator-0:2.0.5-3.el8.ppc64le as a component of OpenShift Service Mesh 2.0
Red Hat has investigated whether a possible mitigation exists for this issue, and has not been able to identify a practical example. Please update as soon as possible.
- Workaroundservicemesh-operator-0:2.0.5-3.el8.s390x as a component of OpenShift Service Mesh 2.0
Red Hat has investigated whether a possible mitigation exists for this issue, and has not been able to identify a practical example. Please update as soon as possible.
- Workaroundservicemesh-operator-0:2.0.5-3.el8.src as a component of OpenShift Service Mesh 2.0
Red Hat has investigated whether a possible mitigation exists for this issue, and has not been able to identify a practical example. Please update as soon as possible.
- Workaroundservicemesh-operator-0:2.0.5-3.el8.x86_64 as a component of OpenShift Service Mesh 2.0
Red Hat has investigated whether a possible mitigation exists for this issue, and has not been able to identify a practical example. Please update as soon as possible.
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan